CVE-2017-9811
CriticalSummary
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.
Risk Assessment
Privilege escalation to root can lead to full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Kaspersky Anti-Virus to a version after Maintenance Pack 2 Critical Fix 4 to mitigate this vulnerability.
Original NVD description (English source)
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.