Description
VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/22744 ↗
- http://www.securityfocus.com/archive/1/461485/100/0/threaded ↗
- http://osvdb.org/33797 ↗
- http://www.securitytracker.com/id?1017707 ↗
- https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=518722 ↗
- http://www.vupen.com/english/advisories/2007/0777 ↗
- http://secunia.com/advisories/24337 ↗
- http://securityreason.com/securityalert/2342 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32729 ↗