CVE-2006-6474: McAfee Virusscan

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory.

Affected products

  • McAfee Virusscan: up to and including 4510e

Published 2006-12-14. Last modified 2026-06-16.