CVE-2008-5982
BMC PatrolAgent Version Logging Format String Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message.
Vulnerabilidad en el formato de la cadena de caracteres en BMC PATROL Agent en versiones anteriores a 3.7.30 que permite a los atacantes remotos, ejecutar arbitrariamente código a través especificadores en el formato de la cadena caracteres en un número inválido de versión para TCP puerto 3181, el cual no es propiamente manejado cuando se escribe un mensaje de log.
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of BMC PatrolAgent. Authentication is not required to exploit this vulnerability.
The specific flaw exists due to a format string handling error during log message writing. Supplying an invalid version number containing format string tokens to a vulnerable target on TCP port 3181 triggers an exploitable format string vulnerability which can result in arbitrary code execution.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2008-12-08 CVE Published
- 2009-01-27 CVE Reserved
- 2024-02-10 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-134: Use of Externally-Controlled Format String
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/archive/1/499013/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/32692 | Vdb Entry | |
| http://www.securitytracker.com/id?1021361 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2008/3379 | Vdb Entry | |
| http://www.zerodayinitiative.com/advisories/ZDI-08-082 | X_refsource_misc |
|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/47175 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/33049 | 2018-10-11 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | <= 3.7 Search vendor "Bmc" for product "Patrol Agent" and version " <= 3.7" | - |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.2 Search vendor "Bmc" for product "Patrol Agent" and version "3.2" | - |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.2.3 Search vendor "Bmc" for product "Patrol Agent" and version "3.2.3" | - |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.2.5 Search vendor "Bmc" for product "Patrol Agent" and version "3.2.5" | - |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.2.7 Search vendor "Bmc" for product "Patrol Agent" and version "3.2.7" | - |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.3.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.3.00" | - |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.3.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.3.00" | nt |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.3.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.3.00" | unix |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.4.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.00" | - |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.4.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.00" | nt |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.4.00 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.00" | unix |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.4.11 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.11" | - |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.4.11 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.11" | nt |
Affected
| ||||||
| Bmc Search vendor "Bmc" | Patrol Agent Search vendor "Bmc" for product "Patrol Agent" | 3.4.11 Search vendor "Bmc" for product "Patrol Agent" and version "3.4.11" | unix |
Affected
| ||||||