certfr_avis - certa-2006-avi-564

CERTA-2006-AVI-564

Vulnerability from certfr_avis - Published: - Updated:

McAfee Viruscan est un logiciel antivirus qui peut être exécuté en ligne de commande. Une mauvaise gestion des répertoires permet à un utilisateur malintentionné d'élever ses privilèges et d'exécuter du code arbitraire.

Description

Le répertoire courant est inclus dans la liste des répertoires parcourus lors de la recherche les librairies utilisées pour l'analyse antivirale. Un utilisateur malveillantattaquant peut créer un objet malveillant dans un répertoire et inciter à utiliser McAfee Command Line Scanner depuis ce répertoire. L'attaquant fera exécuter le code malveillant avec les privilèges du logiciel antivirus.

Il convient de n'exécuter l'analyser en ligne de commande que depuis un répertoire sûr.

La version pour Windows n'est pas concernée.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

McAfee Command Line Scanner pour Linux.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CVE-2006-6474 (GCVE-0-2006-6474)

Vulnerability from cvelistv5 – Published: 2006-12-14 20:00 – Updated: 2024-08-07 20:26

Summary

Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://secunia.com/advisories/23429	third-party-advisoryx_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://secunia.com/advisories/23278	third-party-advisoryx_refsource_SECUNIA
	http://securitytracker.com/id?1017385	vdb-entryx_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2006/5023	vdb-entryx_refsource_VUPEN
	http://www.securityfocus.com/bid/21592	vdb-entryx_refsource_BID
	http://security.gentoo.org/glsa/glsa-200612-15.xml	vendor-advisoryx_refsource_GENTOO

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:26:46.592Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "23429",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23429"
          },
          {
            "name": "mcafee-dtrpath-code-execution(30898)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30898"
          },
          {
            "name": "23278",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23278"
          },
          {
            "name": "1017385",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017385"
          },
          {
            "name": "ADV-2006-5023",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/5023"
          },
          {
            "name": "21592",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/21592"
          },
          {
            "name": "GLSA-200612-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200612-15.xml"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-12-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "23429",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23429"
        },
        {
          "name": "mcafee-dtrpath-code-execution(30898)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30898"
        },
        {
          "name": "23278",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23278"
        },
        {
          "name": "1017385",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017385"
        },
        {
          "name": "ADV-2006-5023",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/5023"
        },
        {
          "name": "21592",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/21592"
        },
        {
          "name": "GLSA-200612-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200612-15.xml"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-6474",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "23429",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23429"
            },
            {
              "name": "mcafee-dtrpath-code-execution(30898)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30898"
            },
            {
              "name": "23278",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23278"
            },
            {
              "name": "1017385",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017385"
            },
            {
              "name": "ADV-2006-5023",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/5023"
            },
            {
              "name": "21592",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/21592"
            },
            {
              "name": "GLSA-200612-15",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200612-15.xml"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-6474",
    "datePublished": "2006-12-14T20:00:00",
    "dateReserved": "2006-12-11T00:00:00",
    "dateUpdated": "2024-08-07T20:26:46.592Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted