ID de Prueba:	1.3.6.1.4.1.25623.1.0.814306
Categoría:	Privilege escalation
Título:	MagniComp SysInfo Privilege Escalation Vulnerability - Linux
Resumen:	MagniComp SysInfo is prone to a privilege escalation vulnerability.
Descripción:	Summary: MagniComp SysInfo is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists because the application relies on information passed to it from the shell to see where it is installed and where to find the configuration file. Additionally, the application relies on arbitrary arguments to decide which applications to execute. Vulnerability Impact: Successful exploitation allows local users to gain root privilege and hence full control over the affected system. Affected Software/OS: All versions of SysInfo prior to version 10-H64 Solution: Update SysInfo to version 10-H64 or later. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6516 BugTraq ID: 96934 http://www.securityfocus.com/bid/96934 https://www.exploit-db.com/exploits/44150/ https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/ https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/
Copyright	Copyright (C) 2018 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.