CVE-2024-13206 – REVE Antivirus reveinstall default permission

https://notcve.org/view.php?id=CVE-2024-13206

09 Jan 2025 — A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. • https://github.com/hawkteam404/RnD_Public/blob/main/reve_av_multiple_vuln.md • CWE-266: Incorrect Privilege Assignment CWE-276: Incorrect Default Permissions •