Vulnerability Description
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Virusscan Enterprise | <= 2.0.3 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/94823
- http://www.securitytracker.com/id/1037433
- https://kc.mcafee.com/corporate/index?page=content&id=SB10181Vendor Advisory
- https://www.exploit-db.com/exploits/40911/
- http://www.securityfocus.com/bid/94823
- http://www.securitytracker.com/id/1037433
- https://kc.mcafee.com/corporate/index?page=content&id=SB10181Vendor Advisory
- https://www.exploit-db.com/exploits/40911/
FAQ
What is CVE-2016-8020?
CVE-2016-8020 is a vulnerability with a CVSS score of 8.0 (HIGH). Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to execute arbitrary code via a crafted H...
How severe is CVE-2016-8020?
CVE-2016-8020 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-8020?
Check the references section above for vendor advisories and patch information. Affected products include: Mcafee Virusscan Enterprise.