NfSen CVE-2017-6972 Unspecified Security Bypass Vulnerability
by CIRT Team
Description: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.
Impact: Remote attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Mitigation: Updates are available. Please check specific vendor advisory for more information.
Reference URL’s:
- http://www.securityfocus.com/bid/97016/info
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6972
- https://www.alienvault.com/forums/discussion/8698
- https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released—security-fix/
Recommended Posts
Cyber Threat Alert: Surge in Attacks via Compromised Third-Party Service Providers
08 Feb 2024 - Articles, English articles, Security Advisories & Alerts
Subscribe here
MEMBER OF:
