PT-2006-7083 · Mcafee · Mcafee Virusscan For Linux

Jakub Moc · Publicado 2006-12-14 · Atualizado 2017-07-29 · CVE-2006-6474

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions McAfee VirusScan for Linux versions 4510e and earlier

Description The issue concerns an untrusted search path vulnerability. It includes the current working directory in the DT RPATH environment variable, allowing local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.

Recommendations For McAfee VirusScan for Linux versions 4510e and earlier, consider restricting access to the DT RPATH environment variable to prevent local users from loading arbitrary ELF DSO libraries until a patch is available.

Correção

Identificadores relacionados

CVE-2006-6474

Produtos afetados

Mcafee Virusscan For Linux

Referências · 8

• http://secunia.com/advisories/23429 · Nota
• http://securitytracker.com/id?1017385 · Nota
• http://security.gentoo.org/glsa/glsa-200612-15.xml · Aviso do Fabricante
• http://securityfocus.com/bid/21592 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30898 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6474 · Nota de Segurança
• http://vupen.com/english/advisories/2006/5023 · Nota
• http://secunia.com/advisories/23278 · Nota