CVE-2019-19219

CVE-2019-19219 affects BMC Control-M/Agent 7.0.00.000. The CNVD entry describes a vulnerability in Control-M/Agent–Control-M/Server communication over TCP that lets remote attackers submit a special request to download arbitrary files. The NVD entry similarly states Arbitrary File Download. No re...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2019-19220

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...

CVE-2019-19215: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...

CVE-2019-19220: Improper Neutralization of Special Elements used in an OS Command

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...

CVE-2019-19216: Improper Privilege Management

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...

CVE-2019-19217: Improper Neutralization of Special Elements used in an OS Command

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...

CVE-2019-19218: Insufficiently Protected Credentials

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...

CVE-2019-19219: Undefined Security Weakness

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris (and possibly other platforms) is affected by a local symlink race that allows a local user to overwrite arbitrary files via temporary files. This vulnerability can impact integrity (partial) with no confidentiality/availability impact per the CVSS vector...

Insecure Temporary Files in BMC/Control-M Agent

BMC's Control M is an enterprise scheduling facility. Unfortunately, the agent software suffers from a problem with insecure temporary file creation. We noticed the problem on Solaris systems running the version 6.1.03 with current patches; it is reasonable to assume that other OS platforms and...

BMC Control M enterprise scheduling system agent symbolic links problem

Insecure creation of temporary directory...

CVE-2005-3311: Undefined Security Weakness

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...