PT-1998-1153 · Platinum · Platinum Policy Compliance Manager

Published 1998-12-04 · Updated 2018-05-03 · CVE-1999-1147

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Platinum Policy Compliance Manager (PCM) version 7.0

Description A buffer overflow issue allows remote attackers to execute arbitrary commands by sending a long string to the Agent port (1827), handled by smaxagent.exe.

Recommendations For version 7.0, consider restricting access to the Agent port (1827) as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-1999-1147

Affected Products

Platinum Policy Compliance Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1147 · Security Note
• http://osvdb.org/3164 · Note
• http://marc.info/?l=bugtraq&m=91273739726314&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1430 · Note