{"uuid": "26e52a92-d483-4184-95e3-cdd85ea6c2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-6516", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/local/magnicomp_sysinfo_mcsiwrapper_priv_esc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Daniel Lawson\", \"Romain Trouve\", \"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module attempts to gain root privileges on systems running\\n          MagniComp SysInfo versions prior to 10-H64.\\n\\n          The .mcsiwrapper suid executable allows loading a config file using the\\n          '--configfile' argument. The 'ExecPath' config directive is used to set\\n          the executable load path. This module abuses this functionality to set\\n          the load path resulting in execution of arbitrary code as root.\\n\\n          This module has been tested successfully with SysInfo version\\n          10-H63 on Fedora 20 x86_64, 10-H32 on Fedora 27 x86_64, 10-H10 on\\n          Debian 8 x86_64, and 10-GA on Solaris 10u11 x86.\", \"disclosure_date\": \"2016-09-23\", \"fullname\": \"exploit/multi/local/magnicomp_sysinfo_mcsiwrapper_priv_esc\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"MagniComp SysInfo mcsiwrapper Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/local/magnicomp_sysinfo_mcsiwrapper_priv_esc.rb\", \"platform\": \"Linux,Solaris\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/local/magnicomp_sysinfo_mcsiwrapper_priv_esc\", \"references\": [\"CVE-2017-6516\", \"BID-96934\", \"URL-http://www.magnicomp.com/support/cve/CVE-2017-6516.shtml\", \"URL-https://labs.mwrinfosecurity.com/advisories/magnicomps-sysinfo-root-setuid-local-privilege-escalation-vulnerability/\", \"URL-https://labs.mwrinfosecurity.com/advisories/multiple-vulnerabilities-in-magnicomps-sysinfo-root-setuid/\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Automatic\", \"Solaris\", \"Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:24.864151Z"}