PROBLEM:
McAfee VirusScan Enterprise Lets Local Users Gain Elevated Privileges
PLATFORM:
VSE 8.8 Patch 2 with Access Protection, including Self Protection, turned off
ABSTRACT:
A vulnerability was reported in McAfee VirusScan Enterprise.
REFERENCE LINKS:
McAfee Security Bulletins ID: SB10038
SecurityTracker Alert ID: 1028209
IMPACT ASSESSMENT:
Medium
DISCUSSION:
When Access Protection has been disabled, a local user can gain full control of the target application
IMPACT:
A local user can obtain elevated privileges on the target system.
SOLUTION:
The vendor has issued a fix (8.8 Patch 2 with HF778101, 8.8 Patch 3)