6.9
CVSSv2

CVE-2014-2591

Published: 14/05/2014 Updated: 24/06/2014
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 614
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

bmc patrol agent 3.9.00

Exploits

It has been identified that binaries that are executed with elevated privileges (SetGID and SetUID programs) have been compiled in manner that means they searched for libraries in insecure locations Version 3900 of BMC Patrol for AIX is affected ...