CVE-2017-6516

A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to gain elevated privileges. Parts of SysInfo require setuid-to-root access in order to access restricted system files and make restricted kernel calls. This access could be exploited by a local attacker to gain a root shell prompt using the right combination of environment variables and command line arguments.

• CWE-20

• http://www.magnicomp.com/support/cve/CVE-2017-6516.shtmlThird Party Advisory
• http://www.securityfocus.com/bid/96934Third Party Advisory, VDB Entry
• https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/Third Party Advisory
• https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/Third Party Advisory
• https://www.exploit-db.com/exploits/44150/
• http://www.magnicomp.com/support/cve/CVE-2017-6516.shtmlThird Party Advisory
• http://www.securityfocus.com/bid/96934Third Party Advisory, VDB Entry
• https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/Third Party Advisory
• https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/Third Party Advisory
• https://www.exploit-db.com/exploits/44150/

Published

Mar 14, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6509Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a re…
• CVE-2017-6510Easy File Sharing FTP Server version 3.6 is vulnerable to a …
• CVE-2017-6511andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflect…6.1
• CVE-2017-6512Race condition in the rmtree and remove_tree functions in th…5.9
• CVE-2017-6513The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizo…
• CVE-2017-6514WordPress 4.7.2 mishandles listings of post authors, which a…
• CVE-2017-6517Microsoft Skype 7.16.0.102 contains a vulnerability that cou…
• CVE-2017-6518Cross-site scripting (XSS) vulnerability in /sanadata/seo/in…
• CVE-2017-6519avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently r…9.1
• CVE-2017-6520The Multicast DNS (mDNS) responder used in BOSE Soundtouch 3…
• CVE-2017-6526An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLI…
• CVE-2017-6527An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLI…