« Volver al listado

CVE-2008-5982

Estado: ModificadaAlta (10)—

Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

BMC — Patrol Agent

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-5982",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-01-27T22:30:00.360",
  "references": [
    {
      "url": "http://secunia.com/advisories/33049",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/499013/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/32692",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1021361",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/3379",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-082/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47175",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/33049",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/499013/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/32692",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1021361",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/3379",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-082/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47175",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-134"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en el formato de la cadena de caracteres en BMC PATROL Agent en versiones anteriores a 3.7.30 que permite a los atacantes remotos, ejecutar arbitrariamente código a través especificadores en el formato de la cadena caracteres en un número inválido de versión para TCP puerto 3181, el cual no es propiamente manejado cuando se escribe un mensaje de log."
    }
  ],
  "lastModified": "2026-06-16T23:01:21.097",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "269E1CCE-F305-4BAD-818E-D19C41EB8531",
              "versionEndIncluding": "3.7"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD670201-A070-4E0D-BE58-2329116681AF"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C07DD3D-C806-4218-BBC8-B859940D9330"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B1CDFC2-10EC-4955-B254-5A22F910EFE8"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C31B63C-A243-4F13-8FAA-0F937AF6C089"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.3.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F63DC2B-19FB-457A-AA91-BA33C1257E4D"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.3.00:*:nt:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77D49047-7F6B-4035-96FB-536FEBD02A64"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.3.00:*:unix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9D2C38B-539B-442C-B3E2-AEF5354C9B24"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.4.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BC4D347-EABE-43C6-AC16-9C04AA00DB28"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.4.00:*:nt:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B0B38C9-20F4-4707-A84C-E2F6982B0690"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.4.00:*:unix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E72F490-B8A0-4631-9D0E-9A27128BBCA9"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.4.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "748C13B8-9FAC-492C-B497-625DF220F799"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.4.11:*:nt:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAC22C4F-978D-427F-93BC-5BE79C7D1484"
            },
            {
              "criteria": "cpe:2.3:a:bmc:patrol_agent:3.4.11:*:unix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F9EB203-28C2-4130-A336-8681CDF47F77"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}