Security Advisory

CVE-2006-6474

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-12-14 20:00:00
Last updated 2024-08-07 20:26:46
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.