Anfälligkeitssuche        Suche in 187964 CVE Beschreibungen
und 85075 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.814306
Kategorie:Privilege escalation
Titel:MagniComp SysInfo Privilege Escalation Vulnerability (Linux)
Zusammenfassung:This host is installed with MagniComp SysInfo; and is prone to privilege escalation vulnerability.
Beschreibung:Summary:
This host is installed with MagniComp SysInfo
and is prone to privilege escalation vulnerability.

Vulnerability Insight:
The flaw exists because the application
relies on information passed to it from the shell to see where it is installed
and where to find the configuration file. Additionally, the application relies
on arbitrary arguments to decide which applications to execute.

Vulnerability Impact:
Successful exploitation allows local
users to gain root privilege and hence full control over the affected system.

Affected Software/OS:
All versions of SysInfo prior to version
10-H64

Solution:
Update SysInfo to version 10-H64 or later. Please see the references for more information.

CVSS Score:
7.2

CVSS Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C

Querverweis: BugTraq ID: 96934
Common Vulnerability Exposure (CVE) ID: CVE-2017-6516
http://www.securityfocus.com/bid/96934
https://www.exploit-db.com/exploits/44150/
https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/
https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/
CopyrightCopyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 85075 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.