CVE-2017-9811
CriticalSummary
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.
Risk Assessment
Privilege escalation to root can lead to full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Kaspersky Anti-Virus to a version after Maintenance Pack 2 Critical Fix 4 to mitigate this vulnerability.
Other vulnerabilities in Kaspersky Anti-Virus for Linux File Server
See all- CVE-2017-9812High
The reportId parameter of the getReportStatus action method in the web interface of Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) can be abused to read arbitrary files with kluser privileges.
- CVE-2017-9810High
The lack of Anti-CSRF tokens in forms on the web interface of Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) allows an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.
Original NVD description (English source)
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.