CVE

Id
96712  
CVE No.
CVE-2016-9892  
Status
Candidate  
Description
The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses to license activation requests via a self-signed certificate. NOTE: this issue can be combined with CVE-2016-0718 to execute arbitrary code remotely as root.  
Phase
Assigned (20161207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
801473 96712 CVE-2016-9892 FULLDISC:20170227 CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6  View
801474 96712 CVE-2016-9892 URL:http://seclists.org/fulldisclosure/2017/Feb/68  View
801475 96712 CVE-2016-9892 MISC:http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html  View
801476 96712 CVE-2016-9892 CONFIRM:http://support.eset.com/ca6333/  View
801477 96712 CVE-2016-9892 BID:96462  View

Related JVN