NVD

Id
22430  
Name
CVE-2016-9638  
Description
In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" program will then run "virsh" using root privileges. This allows local users to elevate their privileges to root.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-12-02  
Modified Date
2016-12-27  
Seq
2016-9638  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119068 22430 CVE-2016-9638 http://www.nes.fr/securitylab/index.php/2016/12/02/privilege-escalation-on-bmc-patrol  View
119069 22430 CVE-2016-9638 95009  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5327 JVNDB-2016-006100 BMC Patrol における root 権限へ昇格される脆弱性 BMC Patrol には、setuid ビットで設定されているバイナリ "listguests64" を実行する際、root 権限へ昇格される脆弱性が存在します。 CVE-2016-9638 96145 CVE-2016-9638 22430 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006100.html 2016-12-02 2016-12-05 View