BMC Patrol Agent Remote Format String Vulnerability

Bugtraq ID:	32692
Class:	Input Validation Error
CVE:	CVE-2008-5982
Remote:	Yes
Local:	No
Published:	Dec 08 2008 12:00AM
Updated:	Apr 13 2015 09:12PM
Credit:	An anonymous researcher working with Zero Day Initiative.
Vulnerable:	BMC Software Patrol 3.5 BMC Software Patrol 3.4.11 BMC Software Patrol 3.3 BMC Software Patrol 3.2.7 BMC Software Patrol 3.2.5 BMC Software Patrol 3.2.3 BMC Software Patrol 3.2 - Data General DG/UX 8.0 - Data General DG/UX 7.0 - Digital UNIX 4.0 - HP HP-UX 11.0 - HP HP-UX 10.0 - HP HP-UX 9.0 - IBM AIX 4.2.1 - IBM AIX 4.2 - SCO Open Server 5.0 - SCO Unixware 7.0 - Sequent Dynix 3.0.17 - Sequent Dynix 3.0.12 - SGI IRIX 6.5.4 - SGI IRIX 6.5 - SGI IRIX 6.4 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - Sun Solaris 2.5_x86 - Sun Solaris 2.5
Not Vulnerable:	BMC Software Patrol 3.7.30

BMC Patrol Agent Remote Format String Vulnerability

BMC Patrol Agent is prone to a remote format-string vulnerability because the software fails to perform adequate boundary checks on user-supplied input.

Attackers can leverage this issue to execute arbitrary code with SYSTEM-level privileges. Failed attacks will likely cause denial-of-service conditions.

Versions prior to Patrol Agent 3.7.30 are vulnerable.

BMC Patrol Agent Remote Format String Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

BMC Patrol Agent Remote Format String Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

BMC Patrol Agent Remote Format String Vulnerability

References:

• BMC PatrolAgent Version Logging Format String Vulnerability (Zero Day Initiative)
  
• Vendor Homepage (BMC Software)
  
• ZDI-08-082: BMC PatrolAgent Version Logging Format String Vulnerability ([email protected])