Lucene search

K
cve[email protected]CVE-2006-6474
HistoryDec 14, 2006 - 8:28 p.m.

CVE-2006-6474

2006-12-1420:28:00
web.nvd.nist.gov
23
mcafee
virusscan
linux
cve-2006-6474
vulnerability
dt_rpath
elf
dso
nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.6%

Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.

Affected configurations

NVD
Node
mcafeevirusscanRange4510elinux

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.6%

Related for CVE-2006-6474