EDB-40911
functionalMcAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution
view exploit source exploit_dbverifiedtype remoteauthor Andrew Fasanopublished 2016-12-13catalog exploit_db
01
exploited CVEs (10)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-8025US | medium6.2 | Exploit | ||
SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to obtain product information via a crafted HT… | ||||
| CVE-2016-8024US | high8.1 | Exploit | ||
Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attack… | ||||
| CVE-2016-8023US | high8.1 | Exploit | ||
Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to bypa… | ||||
| CVE-2016-8022US | high7.5 | Exploit | ||
Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to execute arbitrary… | ||||
| CVE-2016-8021US | medium5.0 | Exploit | ||
Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to spoof up… | ||||
| CVE-2016-8020US | high8.0 | Exploit | ||
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to execute arbitrary… | ||||
| CVE-2016-8019US | medium6.1 | Exploit | ||
Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows unauthenticated remote attackers to inject arb… | ||||
| CVE-2016-8018US | medium4.3 | Exploit | ||
Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to execute unauthorize… | ||||
| CVE-2016-8017US | medium4.1 | Exploit | ||
Special element injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to read files on the webserver… | ||||
| CVE-2016-8016US | low3.4 | Exploit | ||
Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to obtain the existence of unauthorized files on… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan