BMC Control M Agent Insecure File Permission Vulnerability
BID:15167
Info
BMC Control M Agent Insecure File Permission Vulnerability
| Bugtraq ID: | 15167 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 22 2005 12:00AM |
| Updated: | Oct 22 2005 12:00AM |
| Credit: | [email protected] is credited with the discovery of this vulnerability. |
| Vulnerable: |
BMC Software Control-M Agent 6.1 .03 |
| Not Vulnerable: | |
Discussion
BMC Control M Agent Insecure File Permission Vulnerability
BMC Control M Agent creates temporary files in an insecure manner.
The application creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to overwrite files in the context of the application.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
BMC Control M Agent version 6.1.03 is affected; earlier version may also be affected.
BMC Control M Agent creates temporary files in an insecure manner.
The application creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to overwrite files in the context of the application.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
BMC Control M Agent version 6.1.03 is affected; earlier version may also be affected.
Exploit / POC
BMC Control M Agent Insecure File Permission Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
BMC Control M Agent Insecure File Permission Vulnerability
Solution:
The vendor has been notified of this vulnerability and has created problem ticket number BMPM010114 as a reference to this issue; a fix will be implemented in a future release.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
The vendor has been notified of this vulnerability and has created problem ticket number BMPM010114 as a reference to this issue; a fix will be implemented in a future release.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
BMC Control M Agent Insecure File Permission Vulnerability
References:
References:
- BMC Control M Website (BMC Software)
- Vendor Homepage (BMC Software)
- Insecure Temporary Files in BMC/Control-M Agent ([email protected])