PT-2017-17434 · Nfsen+1 · Nfsen+2

Paul Taylor · Publicado 2017-03-22 · Atualizado 2019-10-03 · CVE-2017-6970

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AlienVault USM and OSSIM versions prior to 5.3.7 NfSen versions prior to 1.3.8

Description The issue allows local users to execute arbitrary commands in a privileged context via an NfSen socket.

Recommendations For AlienVault USM and OSSIM versions prior to 5.3.7, update to version 5.3.7 or later. For NfSen versions prior to 1.3.8, update to version 1.3.8 or later.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2017-6970

Produtos afetados

Alienvault Usm

Nfsen

Ossim

Referências · 6

• 🔥 https://exploit-db.com/exploits/42305 · Exploit
• https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix · Nota
• https://osv.dev/vulnerability/CVE-2017-6970 · Aviso do Fabricante
• https://alienvault.com/forums/discussion/8698 · Nota
• https://alienvault.com/forums/discussion/8325 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6970 · Nota de Segurança