PT-2017-17434 · Nfsen+1 · Nfsen+2

Paul Taylor · Published 2017-03-22 · Updated 2019-10-03 · CVE-2017-6970

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AlienVault USM and OSSIM versions prior to 5.3.7 NfSen versions prior to 1.3.8

Description The issue allows local users to execute arbitrary commands in a privileged context via an NfSen socket.

Recommendations For AlienVault USM and OSSIM versions prior to 5.3.7, update to version 5.3.7 or later. For NfSen versions prior to 1.3.8, update to version 1.3.8 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2017-6970

Affected Products

Alienvault Usm

Nfsen

Ossim

References · 6

• 🔥 https://exploit-db.com/exploits/42305 · Exploit
• https://osv.dev/vulnerability/CVE-2017-6970 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6970 · Security Note
• https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix · Note
• https://alienvault.com/forums/discussion/8698 · Note
• https://alienvault.com/forums/discussion/8325 · Note