Security Advisory

CVE-2016-9638

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-12-02 17:00:00

Last updated 2024-08-06 02:59:03

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" program will then run "virsh" using root privileges. This allows local users to elevate their privileges to root.

← Browse all CVEs View on cve.org ↗