Test Kennung:	1.3.6.1.4.1.25623.1.0.814306
Kategorie:	Privilege escalation
Titel:	MagniComp SysInfo Privilege Escalation Vulnerability - Linux
Zusammenfassung:	MagniComp SysInfo is prone to a privilege escalation vulnerability.
Beschreibung:	Summary: MagniComp SysInfo is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists because the application relies on information passed to it from the shell to see where it is installed and where to find the configuration file. Additionally, the application relies on arbitrary arguments to decide which applications to execute. Vulnerability Impact: Successful exploitation allows local users to gain root privilege and hence full control over the affected system. Affected Software/OS: All versions of SysInfo prior to version 10-H64 Solution: Update SysInfo to version 10-H64 or later. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6516 BugTraq ID: 96934 http://www.securityfocus.com/bid/96934 https://www.exploit-db.com/exploits/44150/ https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/ https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.