CVE

Id
24584  
CVE No.
CVE-2007-1227  
Status
Candidate  
Description
VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands.  
Phase
Assigned (20070302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
242502 24584 CVE-2007-1227 BUGTRAQ:20070227 [NETRAGARD-20070220 SECURITY ADVISORY] [McAfee VirusScan for Mac (Virex) Local root exploit and Scan Bypass]  View
242503 24584 CVE-2007-1227 URL:http://www.securityfocus.com/archive/1/archive/1/461485/100/0/threaded  View
242504 24584 CVE-2007-1227 CONFIRM:https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=518722  View
242505 24584 CVE-2007-1227 BID:22744  View
242506 24584 CVE-2007-1227 URL:http://www.securityfocus.com/bid/22744  View
242507 24584 CVE-2007-1227 VUPEN:ADV-2007-0777  View
242508 24584 CVE-2007-1227 URL:http://www.vupen.com/english/advisories/2007/0777  View
242509 24584 CVE-2007-1227 OSVDB:33797  View
242510 24584 CVE-2007-1227 URL:http://osvdb.org/33797  View
242511 24584 CVE-2007-1227 SECTRACK:1017707  View
242512 24584 CVE-2007-1227 URL:http://www.securitytracker.com/id?1017707  View
242513 24584 CVE-2007-1227 SECUNIA:24337  View
242514 24584 CVE-2007-1227 URL:http://secunia.com/advisories/24337  View
242515 24584 CVE-2007-1227 SREASON:2342  View
242516 24584 CVE-2007-1227 URL:http://securityreason.com/securityalert/2342  View
242517 24584 CVE-2007-1227 XF:mcafee-virex-library-privilege-escalation(32729)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54763 JVNDB-2007-003455 Nullsoft ShoutcastServer におけるクロスサイトスクリプティングの脆弱性 Nullsoft ShoutcastServer は、ログファイルを表示している際、管理者インターフェースで適切に処理しないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1229 24584 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003455.html  View