CVE-2017-6553
First published: Sat Apr 29 2017(Updated: )
Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Quest Privilege Manager For Unix | <=6.0.0-50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-6553?
CVE-2017-6553 has a critical severity rating with a score of 9.8.
How do I fix CVE-2017-6553?
To fix CVE-2017-6553, upgrade to Quest One Identity Privilege Manager for Unix version 6.0.0.061 or later.
What type of vulnerability is CVE-2017-6553?
CVE-2017-6553 is classified as a buffer overflow vulnerability.
What can attackers achieve with CVE-2017-6553?
Attackers exploiting CVE-2017-6553 can gain full access to the policy server.
Which software versions are affected by CVE-2017-6553?
CVE-2017-6553 affects Quest One Identity Privilege Manager for Unix versions prior to 6.0.0.061.
- collector/nvd-index
- vendor/quest
- product/privilege manager for unix
- canonical/quest privilege manager for unix