McAfee.VirusScan.Enterprise.Linux.Privilege.Escalation

Description

This indicates an attack attempt to exploit an Elevation of Privilege vulnerability in McAfee VirusScan Enterprise.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted HTTP request. A remote attacker may be able to exploit this to elevate their privileges, via a crafted HTTP request.

Affected Products

McAfee VirusScan Enterprise for Linux version 1.9.2 to 2.0.2

Impact

Privilege Escalation: Remote attackers can leverage their privileges on vulnerable systems.
System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor:
https://kc.mcafee.com/corporate/index?page=content&id=SB10181

References