| 标题 | Microword Escan Antivirus For Linux 7.0.32 OS Command Injection |
|---|
| 描述 | Escan Antivirus for Linux has real-time protection program `rtscanner` run as system service. This program has a OS Command injection vulnerability in quarantine file mechanism. An attacker can send crafted file and gain remote code execution with highest privilege as soon as crafted file writes into victim's disk. |
|---|
| 来源 | ⚠️ https://github.com/dmknght/FIS_RnD/blob/main/escan_rtscanner_rce.md |
|---|
| 用户 | FPT IS Security (UID 72751) |
|---|
| 提交 | 2025-01-18 04時02分 (2 年前) |
|---|
| 管理 | 2025-01-28 15時42分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 293921 [MicroWorld eScan Antivirus 7.0.32 于 Linux Quarantine rtscanner 权限提升] |
|---|
| 积分 | 18 |
|---|