CVE-2013-7460 - A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions

Back Back to CVE browser

MEDIUM

A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions

Published Mar 14, 2017

5.5

MEDIUM

CVSS 3.0

EPSS 0.36%

Description

A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions.

Affected products

Vendor Intel Product Application Control (MAC) Default
n/a
- Version
  6.1.0 for Linux and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Intel

Application Control (MAC)

n/a

Version	Status	Constraints
6.1.0 for Linux and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-7219
Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10054
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-7219		Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10054		x_refsource_CONFIRMPatchVendor Advisory