PT-2017-1471 · Mcafee · Mcafee Virusscan Enterprise

Publicado 2017-03-14 · Atualizado 2017-09-03 · CVE-2016-8021

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Média

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions 2.0.3 and earlier

Description The issue is related to improper verification of cryptographic signatures, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted file. This can allow the attacker to spoof the update server.

Recommendations For versions 2.0.3 and earlier, update to a version that includes the fix for the improper verification of cryptographic signatures to prevent remote attackers from executing arbitrary code.

Exploit

Correção

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

BDU:2017-00611

CVE-2016-8021

Produtos afetados

Mcafee Virusscan Enterprise

Referências · 8

• 🔥 https://exploit-db.com/exploits/40911 · Exploit
• http://securityfocus.com/bid/94823 · Nota
• https://bdu.fstec.ru/vul/2017-00611 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-8021 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-8021 · Aviso do Fabricante
• https://kc.mcafee.com/corporate/index?page=content&id=SB10181 · Aviso do Fabricante
• http://securitytracker.com/id/1037433 · Nota
• https://kc.mcafee.com/corporate/index?page=content&id=SB10181 · Nota