Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.106470
Category:Web application abuses
Title:McAfee VirusScan Enterprise for Linux Multiple Vulnerabilities
Summary:McAfee VirusScan Enterprise for Linux is prone to multiple;vulnerabilities.
Description:Summary:
McAfee VirusScan Enterprise for Linux is prone to multiple
vulnerabilities.

Vulnerability Insight:
McAfee VirusScan Enterprise for Linux is prone to multiple vulnerabilities:

- Remote Unauthenticated File Existence Test (CVE-2016-8016)

- Remote Unauthenticated File Read (CVE-2016-8017)

- No Cross-Site Request Forgery Tokens (CVE-2016-8018)

- Cross Site Scripting (CVE-2016-8019)

- Authenticated Remote Code Execution and Privilege Escalation (CVE-2016-8020)

- Web Interface Allows Arbitrary File Write to Known Location (CVE-2016-8021)

- Remote Use of Authentication Tokens (CVE-2016-8022)

- Brute Force Authentication Tokens (CVE-2016-8023)

- Brute Force Authentication Tokens (CVE-2016-8024)

- Authenticated SQL Injection (CVE-2016-8025)

Vulnerability Impact:
An unauthenticated attacker may execute code when chained the vulnerabilities
together.

Affected Software/OS:
Version 2.0.3

Solution:
Upgrade to Endpoint Security for Linux (ENSL) 10.2 or later.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2016-8016
BugTraq ID: 94823
http://www.securityfocus.com/bid/94823
https://www.exploit-db.com/exploits/40911/
http://www.securitytracker.com/id/1037433
Common Vulnerability Exposure (CVE) ID: CVE-2016-8017
Common Vulnerability Exposure (CVE) ID: CVE-2016-8018
Common Vulnerability Exposure (CVE) ID: CVE-2016-8019
Common Vulnerability Exposure (CVE) ID: CVE-2016-8020
Common Vulnerability Exposure (CVE) ID: CVE-2016-8021
Common Vulnerability Exposure (CVE) ID: CVE-2016-8022
Common Vulnerability Exposure (CVE) ID: CVE-2016-8023
Common Vulnerability Exposure (CVE) ID: CVE-2016-8024
Common Vulnerability Exposure (CVE) ID: CVE-2016-8025
CopyrightCopyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.