CVE-1999-1460

Description

BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program.

Affected products

• BMC / patrol_agent3.2.7
• BMC / patrol_agent3.2 – 3.2
• BMC / patrol_agent3.2.3 – 3.2.3
• BMC / patrol_agent3.2.5 – 3.2.5

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=93198293132463&w=2
• MAILING_LISThttp://marc.info/?l=bugtraq&m=93372579004129&w=2
• MISChttp://www.securityfocus.com/bid/525