Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2018-6693

Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee Endpoint Security for Linux Threat Prevention (ENSLTP)

  • 10.5.0affected
  • 10.5.1 10.5.0affected
  • 10.2.3 Hotfix 1246778 to ≤ 10.2.3 Hotfix 1246778affected

References