McAfee Security Scan Plus CVE-2016-8026 Unspecified Local Command Execution Vulnerability

Bugtraq ID:	98068
Class:	Input Validation Error
CVE:	CVE-2016-8026
Remote:	No
Local:	Yes
Published:	Apr 23 2017 12:00AM
Updated:	May 02 2017 12:11AM
Credit:	Martin Rakhmanov of Trustwave
Vulnerable:	McAfee Security Scan Plus 3.11.469 McAfee Security Scan Plus 2.0.181.2
Not Vulnerable:	McAfee Security Scan Plus 3.11.474.2

McAfee Security Scan Plus CVE-2016-8026 Unspecified Local Command Execution Vulnerability

McAfee Security Scan Plus is prone to an unspecified local command-execution vulnerability.

A local attacker can exploit this issue to execute arbitrary commands with elevated privileges.

McAfee Security Scan Plus (SSP) 3.11.469 and prior versions are vulnerable.

McAfee Security Scan Plus CVE-2016-8026 Unspecified Local Command Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

McAfee Security Scan Plus CVE-2016-8026 Unspecified Local Command Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

McAfee Security Scan Plus CVE-2016-8026 Unspecified Local Command Execution Vulnerability

References:

• McAfee Homepage (McAfee)
  
• McAfee Security Bulletin: Potential vulnerability in McAfee Security Scan Plus i (McAfee)