Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2016-8021

Description

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to spoof update server and execute arbitrary code via a crafted input file.

POC

Reference

- https://kc.mcafee.com/corporate/index?page=content&id=SB10181

- https://www.exploit-db.com/exploits/40911/

Github

- https://github.com/opsxcq/exploit-CVE-2016-8016-25