A local stack-based buffer overflow in PMS version 0.42 allows unauthenticated attackers to achieve arbitrary code execution.

The application fails to properly filter user-supplied input when parsing configuration files, leading to a stack-based buffer overflow. An unauthenticated local attacker can leverage this by providing a specially crafted configuration file to execute arbitrary shell commands via return-oriented programming (ROP) techniques.

Successful exploitation of this vulnerability allows an attacker to gain unauthorized control over the system with the privileges of the user running the PMS client. Given the CVSS score of 8.4, this represents a high-severity risk, as it enables full system compromise if the application is executed by a privileged user or within an environment where lateral movement is possible.

Immediate Action: There is currently no official patch available; users should restrict file system access to sensitive PMS configuration files to prevent unauthorized modification by local users.

Proactive Monitoring: Monitor system logs for unexpected process crashes or execution of unauthorized shell commands originating from the PMS process context.

Compensating Controls: Ensure that the principle of least privilege is applied to the user account running the PMS client to minimize the potential impact of a successful command execution.

Public Exploit Available: Yes — a published proof-of-concept exists via the Exploit-DB entry 44426.

Due to the high severity of this buffer overflow and the availability of a functional proof-of-concept, users must treat this as a significant security risk. Since no vendor patch is available, administrators should prioritize restricting access to the application's configuration environment and monitor for any suspicious activity related to the PMS binary.