Test ID:	1.3.6.1.4.1.25623.1.0.814306
Category:	Privilege escalation
Title:	MagniComp SysInfo Privilege Escalation Vulnerability - Linux
Summary:	MagniComp SysInfo is prone to a privilege escalation vulnerability.
Description:	Summary: MagniComp SysInfo is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists because the application relies on information passed to it from the shell to see where it is installed and where to find the configuration file. Additionally, the application relies on arbitrary arguments to decide which applications to execute. Vulnerability Impact: Successful exploitation allows local users to gain root privilege and hence full control over the affected system. Affected Software/OS: All versions of SysInfo prior to version 10-H64 Solution: Update SysInfo to version 10-H64 or later. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6516 BugTraq ID: 96934 http://www.securityfocus.com/bid/96934 https://www.exploit-db.com/exploits/44150/ https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/ https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.