VYPR

Privilege Manager

by Quest

CVEs (2)

  • CVE-2017-6553CriApr 29, 2017
    risk 0.70cvss 9.8epss 0.42

    Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon.

  • CVE-2017-6554HigApr 14, 2017
    risk 0.51cvss 7.2epss 0.16

    pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.