Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability

An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files.

N/A

允许符号链接跟随的竞争条件

McAfee ENSLTP 权限许可和访问控制问题漏洞

McAfee ENSLTP是美国迈克菲（McAfee）公司的一款基于Linux平台的终端安全防护终端。 McAfee ENSLTP 10.5.1版本、10.5.0版本和10.2.3 Hotfix 1246778及之前版本中存在提权漏洞。攻击者可利用该漏洞提升权限，进而删除任意文件。

N/A

N/A