Vuln: McAfee Agent CVE-2019-3592 Local Privilege Escalation Vulnerability

McAfee Agent is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to gain elevated privileges.

McAfee Agent 5.x versions prior to 5.6.1 HF3 are vulnerable.

exploit

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.

solution

Solution:
Updates are available. Please see the references or vendor advisory for more information.

info

Bugtraq ID:	109148
Class:	Design Error
CVE:	CVE-2019-3592
Remote:	No
Local:	Yes
Published:	Jul 12 2019 12:00AM
Updated:	Jul 12 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	McAfee Agent 5.6.1 McAfee Agent 5.6 HF1264214 McAfee Agent 5.6 McAfee Agent 5.5.4 McAfee Agent 5.5.1 HF1267991 McAfee Agent 5.5.1 McAfee Agent 5.5 McAfee Agent 5.0.6 Hotfix 1267994 McAfee Agent 5.0.6 HF1267994 McAfee Agent 5.0.6 McAfee Agent 5.0.4 McAfee Agent 5.0.3 McAfee Agent 5.0.2 McAfee Agent 5.0.1 McAfee Agent 5.0 McAfee Agent 5.0.4.449 McAfee Agent 5.0.4.283 McAfee Agent 5.0.3.362 McAfee Agent 5.0.3.316 McAfee Agent 5.0.3.272 McAfee Agent 5.0.2.333 McAfee Agent 5.0.2.285 McAfee Agent 5.0.2.188 McAfee Agent 5.0.2.132 McAfee Agent 5.0.1.518 McAfee Agent 5.0.1.516
Not Vulnerable:	McAfee Agent 5.6.1 HF3

references

References:

• McAfee Homepage (McAfee)
  
• McAfee Security Bulletin - McAfee Agent for Windows update addresses weak direct (Mcafee)
  

from SecurityFocus Vulnerabilities https://ift.tt/2YS1lME