Local File Vulnerability in BMC PATROL SNMP Agent

CVE-1999-1460

What is CVE-1999-1460?

The BMC PATROL SNMP Agent, in versions prior to 3.2.07, contains a vulnerability that allows local users to create arbitrary files with world-writeable permissions as root. This exploit can be achieved by manipulating the target filename provided in the second argument when executing the snmpmagt program. This flaw poses a significant security risk, as it could allow unauthorized modifications to sensitive files or the execution of malicious scripts.

References