CVE-2019-17043

Published: Oct 14, 2019Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution.

Affected (1)

Products: Bmc: Patrol Agent

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bmc Patrol Agent	Version 9.0.10i

Related CWEs

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (4)

https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation

Source: cve@mitre.org

Third Party Advisory

https://twitter.com/whira_wr

Source: cve@mitre.org

Third Party Advisory

https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://twitter.com/whira_wr

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.