CVE-2016-8021

Description

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to spoof update server and execute arbitrary code via a crafted input file.

References

https://github.com/opsxcq/exploit-CVE-2016-8016-25

https://www.exploit-db.com/exploits/40911/

https://kc.mcafee.com/corporate/index?page=content&id=SB10181

https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-8869

http://www.securitytracker.com/id/1037433

http://www.securityfocus.com/bid/94823

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS