| عنوان | Microword Escan Antivirus For Linux 7.0.32 OS Command Injection |
|---|
| الوصف | Escan Antivirus for Linux has real-time protection program `rtscanner` run as system service. This program has a OS Command injection vulnerability in quarantine file mechanism. An attacker can send crafted file and gain remote code execution with highest privilege as soon as crafted file writes into victim's disk. |
|---|
| المصدر | ⚠️ https://github.com/dmknght/FIS_RnD/blob/main/escan_rtscanner_rce.md |
|---|
| المستخدم | FPT IS Security (UID 72751) |
|---|
| ارسال | 18/01/2025 04:02 AM (2 سنوات منذ) |
|---|
| الاعتدال | 28/01/2025 03:42 PM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 293921 [MicroWorld eScan Antivirus 7.0.32 على Linux Quarantine rtscanner تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|