• info
• discussion
• exploit
• solution
• references

McAfee VirusScan Path Specification Local Privilege Escalation Vulnerability

An exploit is not required.

The following proof of concept by Reed Arvin is available:

• /data/vulnerabilities/exploits/mc_vs_poc.c