CVE-2018-6693 – Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability

https://notcve.org/view.php?id=CVE-2018-6693

18 Sep 2018 — An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files. Un usuario sin privilegios puede eliminar archivos arbitrarios en un sistema Linux que ejecuta ENSLTP 10.5.1, 10.5.0 y 10.2.3 Hotfix 1246778 y anteriores. Mediante la explotación ... • https://kc.mcafee.com/corporate/index?page=content&id=SB10248 • CWE-274: Improper Handling of Insufficient Privileges CWE-363: Race Condition Enabling Link Following CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •