CVE:CVE-2020-7267
CNNVD:CNNVD-202005-348
McAfee VirusScan Enterprise（VSE）是美国迈克菲（McAfee）公司的一套杀毒软件。该软件提供全方位的安全防护、扫描内存以查找恶意代码和为远程系统优化更新等功能。
基于Linux平台的McAfee VSE 2.0.3 Hotfix 2635000之前版本中存在提权漏洞。本地攻击者可借助符号链接来重定向McAfee删除操作利用该漏洞删除被限制的文件。
solution:Upgrade mcafee virusscan_enterprise to a higher version than 8.8,8.8:patch1,8.8:patch10,8.8:patch11,8.8:patch12,8.8:patch13,8.8:patch2,8.8:patch3,8.8:patch4,8.8:patch5,8.8:patch6,8.8:patch7,8.8:patch8,8.8:patch9,and avoid the version 8.8,8.8:patch1,8.8:patch10,8.8:patch11,8.8:patch12,8.8:patch13,8.8:patch2,8.8:patch3,8.8:patch4,8.8:patch5,8.8:patch6,8.8:patch7,8.8:patch8,8.8:patch9