Описание
Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 4510e (включая)
cpe:2.3:a:mcafee:virusscan:*:*:linux:*:*:*:*:*
EPSS
Процентиль: 23%
0.00075
Низкий
4.6 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.
EPSS
Процентиль: 23%
0.00075
Низкий
4.6 Medium
CVSS2
Дефекты
NVD-CWE-Other