McAfee LinuxShield 'nailsd' Daemon Remote Code Execution Vulnerability
BID:38489
Info
McAfee LinuxShield 'nailsd' Daemon Remote Code Execution Vulnerability
| Bugtraq ID: | 38489 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 02 2010 12:00AM |
| Updated: | Mar 02 2010 12:00AM |
| Credit: | Nikolas Sotiriu |
| Vulnerable: |
McAfee Linuxshield 1.5.1 McAfee Linuxshield 1 McAfee Linuxshield 0 |
| Not Vulnerable: | |
Discussion
McAfee LinuxShield 'nailsd' Daemon Remote Code Execution Vulnerability
McAfee LinuxShield is prone to a remote code-execution vulnerability.
Exploiting this issue allows remote attackers to execute arbitrary code with superuser privileges. Successfully exploiting this issue will completely compromise affected computers.
McAfee LinuxShield 1.5.1 and prior are vulnerable.
McAfee LinuxShield is prone to a remote code-execution vulnerability.
Exploiting this issue allows remote attackers to execute arbitrary code with superuser privileges. Successfully exploiting this issue will completely compromise affected computers.
McAfee LinuxShield 1.5.1 and prior are vulnerable.
Exploit / POC
McAfee LinuxShield 'nailsd' Daemon Remote Code Execution Vulnerability
The following exploit is available:
The following exploit is available:
Solution / Fix
McAfee LinuxShield 'nailsd' Daemon Remote Code Execution Vulnerability
Solution:
Updates are available to address this issue. Please see the references for more information.
Solution:
Updates are available to address this issue. Please see the references for more information.
References
McAfee LinuxShield 'nailsd' Daemon Remote Code Execution Vulnerability
References:
References:
- McAfee Homepage (McAfee)
- NSOADV-2010-004: McAfee LinuxShield remote/local code execution (NSO Research
)