CVE-2006-6474: Medium severity McAfee VirusScan vulnerability
Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DTRPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6474?
CVE-2006-6474 has been classified as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2006-6474?
To fix CVE-2006-6474, upgrade to a version of McAfee VirusScan for Linux later than 4510e that does not include this vulnerability.
Who is affected by CVE-2006-6474?
CVE-2006-6474 affects users of McAfee VirusScan for Linux version 4510e and earlier.
What type of vulnerability is CVE-2006-6474?
CVE-2006-6474 is an untrusted search path vulnerability that allows local users to execute arbitrary code.
Can CVE-2006-6474 be exploited remotely?
CVE-2006-6474 is not remotely exploitable as it requires local access to the affected system.