Vulnerability Description
McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account.
CVSS Score
6.5
MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Linuxshield | <= 1.5.1 |
Related Weaknesses (CWE)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10007Vendor Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10007Vendor Advisory
FAQ
What is CVE-2009-5116?
CVE-2009-5116 is a vulnerability with a CVSS score of 6.5 (MEDIUM). McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client a...
How severe is CVE-2009-5116?
CVE-2009-5116 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-5116?
Check the references section above for vendor advisories and patch information. Affected products include: Mcafee Linuxshield.