CVE-2017-6516

MagniComp SysInfo (Linux/UNIX) prior to version 10-H64 is affected by a local privilege escalation vulnerability. The SysInfo binary requires setuid-to-root access to read restricted system files and perform restricted kernel calls; a local attacker can abuse environment variables and command lin...

CVE-2018-7268

MagniComp SysInfo before 10-H81 (bundled with BMC BladeLogic Automation and other products) is affected by an information disclosure vulnerability. A local, unprivileged user can read any root-owned file on the system (eg, /etc/shadow, log files, private keys) due to a combination of a setuid bin...

CVE-2018-9310

MagniComp SysInfo (before version 10-H82) on Linux/UNIX, when installed setuid root by default, is vulnerable. A local user can execute SysInfo to obtain a root shell, enabling local compromise of the host. The connected documents do not disclose patch/version-specific fixes or mitigation steps. ...