NfSen CVE-2017-6972 Unspecified Security Bypass Vulnerability

by CIRT Team

Description:   AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.

Impact: Remote attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

Mitigation: Updates are available. Please check specific vendor advisory for more information.

Reference URL’s:

• http://www.securityfocus.com/bid/97016/info
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6972
• https://www.alienvault.com/forums/discussion/8698
• https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released—security-fix/

CIRT Team

Recommended Posts

Active Exploitation of Critical F5 BIG – IP Vulnerability (CVE–2023-46747) Uncovered in Bangladesh

06 Nov 2024 - Security Advisories & Alerts

Emerging Threat_Stealer Malware (Lumma C2) Campaign with fake CAPTCHA pages

08 Oct 2024 - Security Advisories & Alerts

Detection of Fog Ransomware Footprint in Cyber Space of Bangladesh

12 Sep 2024 - Security Advisories & Alerts