CVE-2017-6972

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-273

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/97016Third Party Advisory, VDB Entry
https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/Third Party Advisory
https://www.alienvault.com/forums/discussion/8698Vendor Advisory
https://www.exploit-db.com/exploits/42314/
http://www.securityfocus.com/bid/97016Third Party Advisory, VDB Entry
https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/Third Party Advisory
https://www.alienvault.com/forums/discussion/8698Vendor Advisory
https://www.exploit-db.com/exploits/42314/

Timeline

Published: Mar 22, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-69734.8A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inje CVE-2017-69745.5An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of CVE-2017-69756.8Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. NOTE: becaus CVE-2017-69765.5An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allo CVE-2017-69778.6An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It CVE-2017-69787.8An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibility Framework" compon CVE-2017-69797.0An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is af CVE-2017-69808.8An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is af CVE-2017-69817.8An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "CVE-2017-69825.5An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Notifications" component. It allow CVE-2017-69838.8An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "CVE-2017-69848.8An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on