CVE-2008-5982

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-01-27 · updated 2026-06-16
Weakness: CWE-134

Description

Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message.

Affected products

BMC Patrol Agent: through 3.7; 3.2, 3.2.3, 3.2.5, 3.2.7, 3.3.00, 3.4.00 (+1)

References

http://secunia.com/advisories/33049
http://www.securityfocus.com/archive/1/499013/100/0/threaded
http://www.securityfocus.com/bid/32692
http://www.securitytracker.com/id?1021361
http://www.vupen.com/english/advisories/2008/3379
http://www.zerodayinitiative.com/advisories/ZDI-08-082/
https://exchange.xforce.ibmcloud.com/vulnerabilities/47175
http://secunia.com/advisories/33049
http://www.securityfocus.com/archive/1/499013/100/0/threaded
http://www.securityfocus.com/bid/32692
http://www.securitytracker.com/id?1021361
http://www.vupen.com/english/advisories/2008/3379

Get alerted when CVE-2008-5982 or the next vulnerability affects your stack