Description
Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.
References
- 23429 third-party-advisory
- mcafee-dtrpath-code-execution(30898) vdb-entry
- 23278 third-party-advisory
- 1017385 vdb-entry
- ADV-2006-5023 vdb-entry
- 21592 vdb-entry
- GLSA-200612-15 vendor-advisory