VYPR
← All advisories
High severity8.8NVD Advisory· Published May 8, 2020· Updated Jun 17, 2026

CVE-2020-7267

CVE-2020-7267

Description

Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.

Affected products

16
  • McAfee/Virusscan Enterprise14 versions
    cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:*+ 13 more
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:-:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch10:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch11:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch12:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch13:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch1:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch2:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch3:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch4:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch5:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch6:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch7:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch8:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:virusscan_enterprise:8.8:patch9:*:*:*:windows:*:*
  • McAfee/VirusScan Enterprise for Linuxllm-create
    Range: <2.0.3 Hotfix 2635000
  • McAfee/VirusScan Enterprise Linux (VSEL)cpe-rescue
    Range: 2.0.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.