You are here

V-101: McAfee VirusScan Enterprise Lets Local Users Gain Elevated Privileges

February 28, 2013 - 12:05am

Addthis

PROBLEM:

McAfee VirusScan Enterprise Lets Local Users Gain Elevated Privileges

PLATFORM:

VSE 8.8 Patch 2 with Access Protection, including Self Protection, turned off

ABSTRACT:

A vulnerability was reported in McAfee VirusScan Enterprise.

REFERENCE LINKS:

McAfee Security Bulletins ID:    SB10038
SecurityTracker Alert ID:  1028209

IMPACT ASSESSMENT:

Medium

DISCUSSION:

When Access Protection has been disabled, a local user can gain full control of the target application

IMPACT:

A local user can obtain elevated privileges on the target system.

SOLUTION:

The vendor has issued a fix (8.8 Patch 2 with HF778101, 8.8 Patch 3)

Addthis