BMC Control-M/Agent Buffer Overflow Local Privilege Escalation Vulnerability

A buffer overflow vulnerability has been identified in BMC Control-M/Agent versions 9.0.18 prior to 9.0.20, as well as potentially earlier unsupported versions. This vulnerability allows for local privilege escalation when an attacker has access to the system running the Agent.

Impact

Exploitation of this vulnerability can lead to unauthorized privilege escalation, allowing a user to gain elevated rights on the system.

Remediation

Users are advised to upgrade to Control-M/Agent version 9.0.20.100 or higher. For those on versions 9.0.20.000 and lower, the only option is to upgrade to version 9.0.21 or higher and follow the specific upgrade procedures for that version.