CVE-2017-13130

mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2017-08-23

Last modified

2024-08-05

Weaknesses

CWE-427

Affected products

• Patrol (Bmc)

References

• https://github.com/itm4n/bmc-patrol-mcmnm-privesc