CVEvulnerability
CVE-2008-5982
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-134
Description
Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message.
Affected configurations
• bmc patrol agent (<= 3.7)
• bmc patrol agent 3.2
• bmc patrol agent 3.2.3
• bmc patrol agent 3.2.5
• bmc patrol agent 3.2.7
• bmc patrol agent 3.3.00
• bmc patrol agent 3.4.00
• bmc patrol agent 3.4.11
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://secunia.com/advisories/33049 Vendor Advisory
- http://www.securityfocus.com/archive/1/499013/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32692 www.securityfocus.com
- http://www.securitytracker.com/id?1021361 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3379 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-08-082/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47175 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/33049 Vendor Advisory
- http://www.securityfocus.com/archive/1/499013/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32692 www.securityfocus.com
- http://www.securitytracker.com/id?1021361 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3379 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-08-082/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47175 exchange.xforce.ibmcloud.com