critical9.8Public exploit code
CVE-2017-6972
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka Ali…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection2017-07-11 · webapps · linux · Verified
Impact
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alienvault | Ossim | through 5.3.6 |
| Alienvault | Unified Security Management | through 5.3.6 |
| Nfsen | Nfsen | through 1.3.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97016
- https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/
- https://www.alienvault.com/forums/discussion/8698
- https://www.exploit-db.com/exploits/42314/
- http://www.securityfocus.com/bid/97016
- https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/
- https://www.alienvault.com/forums/discussion/8698
- https://www.exploit-db.com/exploits/42314/