📦

anti-virus_for_linux_server

Vendor: kaspersky

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 4 Code Available
Total RCEs 0 Remote Access
Total CVEs 72 Total Indexed
Avg. EPSS 6.57% Exploit Prob.
Latest CVE CVE-2017-9813 Jul 17

Security Vulnerability Index

Page 1 / 8
6.1 CVSS
CVE-2017-9813
Exploit Found

In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptName parameter of the licenseKeyInfo action method is vulnerable to cross-site scripting (XSS).

EPSS: 2.62%
7.5 CVSS
CVE-2017-9812
Exploit Found

The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.

EPSS: 11.26%
9.8 CVSS
CVE-2017-9811
Exploit Found

The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.

EPSS: 10.47%
8.8 CVSS
CVE-2017-9810
Exploit Found

There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). This would allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.

EPSS: 1.93%