Description (CNA)
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/
- http://www.securityfocus.com/bid/97016
- https://www.exploit-db.com/exploits/42314/
- https://www.alienvault.com/forums/discussion/8698
ADP enrichment
No English description supplied.