CVE-2019-8352

Technical details of CVE-2019-8352 are not publicly provided in the supplied connected documents. Monitor for updates from Vulners and official advisories.

CVE-2019-17044

The CVE affects BMC Patrol Agent 9.0.10i. The issue is weak execution permissions on the PatrolAgent SUID binary, enabling a local attacker with patrol privileges to elevate to root by forcing a specially crafted shared library (.so) to be loaded at runtime. This is a privilege-escalation path vi...

CVE-2018-20735

BMC PATROL Agent (PatrolCli) up to version 11.3.01 is vulnerable to privilege escalation and potential domain-wide lateral movement. The PatrolCli/PATROL Agent authentication only validates the user password, not the user’s network permissions, enabling a low-privilege domain account to authentic...

CVE-2019-17043

CVE-2019-17043 affects BMC Patrol Agent 9.0.10i. The issue is a weak execution permission on the best1collect.exe SUID binary, which could allow a local attacker to escalate privileges to the patrol user by crafting a shared library (.so) loaded during execution. Multiple sources (NVD, Red Hat, C...

CVE-2023-34257

CVE-2023-34257 affects IBM BMC Patrol up to version 23.1.00. The agent’s configuration can be remotely modified, and by default authentication is not required. SNMP-related fields (e.g., masterAgentName, masterAgentStartLine) can trigger code execution when the agent restarts. Vendor note: authen...

CVE-2014-2591

CVE-2014-2591 affects BMC Patrol for AIX 3.9.00 and is caused by an incorrect RPATH setting that enables untrusted search path exploitation. This allows local users to gain privileges by loading a crafted library. The vulnerability is a local privilege escalation risk due to insecure runtime libr...

CVE-1999-0801

CVE-1999-0801 affects BMC Patrol. The issue allows remote attackers to gain access to a Patrol agent by spoofing frames, as described in multiple contributor records. The connected documents confirm the vulnerability’s existence and describe the impact as unauthorized agent access via frame spoof...

CVE-1999-1460

CVE-1999-1460 affects the BMC PATROL SNMP Agent prior to version 3.2.07 . The vulnerability lets local users escalate to root by passing the target file as the second argument to the snmpmagt program, resulting in creation of arbitrary world-writeable files. The underlying issue is improper handl...

CVE-1999-0443

Technical details about CVE-1999-0443 are not publicly available in the provided documents. No vendor/affected product or remediation information is specified. Monitor for updates.

CVE-2020-35593

Vulnerability summary (CVE-2020-35593) : BMC PATROL Agent (versions prior to 20.08.00) is affected by a local privilege escalation. The issue arises from vectors involving the internal use of pconfig with the +RESTART -host options, enabling a user with low privileges to escalate to higher privil...

CVE-1999-1459

CVE-1999-1459 affects BMC PATROL Agent prior to 3.2.07. A local symlink attack on a temporary file can enable local users to gain root privileges. The underlying cause is improper handling of a temporary file name via a symlink. The connected documents do not provide a formal remediation or explo...

CVE-2008-5982

Affects: BMC PATROL Agent prior to 3.7.30. Vulnerability type: format string handling in logging. Root cause: format string specifiers in an invalid version number are not properly handled when writing log messages, enabling remote code execution. Attack surface: remote attacker to TCP port 3181 ...

CVE-1999-0921

BMC Patrol is affected by CVE-1999-0921, where a remote attacker can flood the UDP port, resulting in a denial of service. The CVSS data shows network access, low complexity, no authentication, and partial availability impact. No exploit details or remediation are provided in the supplied documen...