Description (CNA)
Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to spoof update server and execute arbitrary code via a crafted input file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Intel / VirusScan Enterprise Linux (VSEL) | affected 2.0.3 (and earlier) |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/94823
- http://www.securitytracker.com/id/1037433
- https://kc.mcafee.com/corporate/index?page=content&id=SB10181
- https://www.exploit-db.com/exploits/40911/
ADP enrichment
No English description supplied.