CVE-2008-5982

BMC PatrolAgent Version Logging Format String Vulnerability

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message.

Vulnerabilidad en el formato de la cadena de caracteres en BMC PATROL Agent en versiones anteriores a 3.7.30 que permite a los atacantes remotos, ejecutar arbitrariamente código a través especificadores en el formato de la cadena caracteres en un número inválido de versión para TCP puerto 3181, el cual no es propiamente manejado cuando se escribe un mensaje de log.

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of BMC PatrolAgent. Authentication is not required to exploit this vulnerability.
The specific flaw exists due to a format string handling error during log message writing. Supplying an invalid version number containing format string tokens to a vulnerable target on TCP port 3181 triggers an exploitable format string vulnerability which can result in arbitrary code execution.

*Credits: Anonymous

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2008-12-08 CVE Published
2009-01-27 CVE Reserved
2024-08-07 CVE Updated
2024-12-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-134: Use of Externally-Controlled Format String

CAPEC

References (7)

URL	Tag	Source
http://www.securityfocus.com/archive/1/499013/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/32692	Vdb Entry
http://www.securitytracker.com/id?1021361	Vdb Entry
http://www.vupen.com/english/advisories/2008/3379	Vdb Entry
http://www.zerodayinitiative.com/advisories/ZDI-08-082	X_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/47175	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/33049	2018-10-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				<= 3.7 Search vendor "Bmc" for product "Patrol Agent" and version " <= 3.7"		-		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.2 Search vendor "Bmc" for product "Patrol Agent" and version "3.2"		-		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.2.3 Search vendor "Bmc" for product "Patrol Agent" and version "3.2.3"		-		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.2.5 Search vendor "Bmc" for product "Patrol Agent" and version "3.2.5"		-		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.2.7 Search vendor "Bmc" for product "Patrol Agent" and version "3.2.7"		-		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.3.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.3.00"		-		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.3.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.3.00"		nt		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.3.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.3.00"		unix		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.4.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.00"		-		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.4.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.00"		nt		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.4.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.00"		unix		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.4.11 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.11"		-		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.4.11 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.11"		nt		Affected
Bmc Search vendor "Bmc"		Patrol Agent Search vendor "Bmc" for product "Patrol Agent"				3.4.11 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.11"		unix		Affected