CVE-2017-9811 The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read...
CriticalCVSS 9.8
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaspersky anti-virus for linux server | <= 8.0.3.297 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20170628 [CORE-2017-0003] - Kaspersky Anti-Virus File Server Multiple Vulnerabilities exploit mailing-list third-party-advisory vdb-entry
- 99330 third-party-advisory vdb-entry
- 1038798 third-party-advisory vdb-entry
- www.coresecurity.com exploit third-party-advisory
- 42269 exploit