Login Request a demo
Unscored severity · published Dec 14, 2006
CVE-2006-6474
Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
Virusscan · Mcafee
through 4510e · source: NVD
Affected product
VI
Virusscan
Mcafee
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6474
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6474
secunia.com
http://secunia.com/advisories/23278
secunia.com
http://secunia.com/advisories/23429
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200612-15.xml
securitytracker.com
http://securitytracker.com/id?1017385
www.securityfocus.com
http://www.securityfocus.com/bid/21592
www.vupen.com
http://www.vupen.com/english/advisories/2006/5023
More from Virusscan
–
CVE-2007-2584
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x…
–
CVE-2006-5417
McAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly including Internet Security Suite, Personal Firewall Plus, and VirusScan, allows remote…
–
CVE-2006-3961
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall…
–
CVE-2006-3575
Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to cause a denial of service (unstable operation) via a long string…
–
CVE-2004-0831
McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow…