CVE-2017-6970

概要

参考情報

• sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix
• alienvault.com/forums/discussion/8325
• alienvault.com/forums/discussion/8698
• exploit-db.com/exploits/42305

ossim のその他の脆弱性

• CVE-2017-6972緊急 9.8AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl co…
• CVE-2017-6971高 8.8AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged …
• CVE-2016-7955緊急 9.8The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote a…
• CVE-2009-3441中 5.0Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infras…
• CVE-2009-3440中 4.3Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to inje…