Vulnerabilities > Mcafee > Virex

DATE CVE VULNERABILITY TITLE RISK
2007-03-02 CVE-2007-1227 Permissions, Privileges, and Access Controls vulnerability in Mcafee Virex 6.2
VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands.
local
mcafee CWE-264
6.6
2007-03-02 CVE-2007-1226 Unspecified vulnerability in Mcafee Virex
McAfee VirusScan for Mac (Virex) before 7.7 patch 1 has weak permissions (0666) for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files.
local
mcafee
4.1
2006-03-03 CVE-2006-0982 Security Bypass vulnerability in Mcafee Virex 7.7
The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from being saved, which allows remote attackers to bypass virus protection, as demonstrated using the EICAR test file.
network
low complexity
mcafee
5.0