CVE:CVE-2020-11446
CNNVD:CNNVD-202004-2286
ESET Smart Security Premium等都是斯洛伐克ESET公司的产品。Smart Security Premium是一套杀毒软件。Internet Security是一套针对互联网安全的杀毒软件。NOD32 Antivirus是一套杀毒软件。
多款ESET产品中的Antivirus and Antispyware Module 1553版本至1560版本存在安全漏洞。攻击者可利用该漏洞在一些ESET目录中创建硬链接，并写入文件，进而提升权限。以下产品及版本受到影响：ESET NOD32 Antivirus；ESET Internet Security；ESET Smart Security；ESET Smart Security Premium；ESET Endpoint Antivirus；ESET Endpoint Security；ESET NOD32 Antivirus Business Edition；ESET Smart Security Business Edition；ESET File Security for Microsoft Windows Server；ESET Mail Security for Microsoft Exchange Server；ESET Mail Security for IBM Domino；ESET Security for Kerio；ESET Security for Microsoft SharePoint Server。
solution:Upgrade eset antivirus_and_antispyware to a higher version than 1560,and avoid the version [1553,1560]; Upgrade eset endpoint_antivirus to a higher version than -; Upgrade eset endpoint_security to a higher version than -; Upgrade eset file_security to a higher version than -; Upgrade eset internet_security to a higher version than -; Upgrade eset mail_security to a higher version than -; Upgrade eset nod32_antivirus to a higher version than -; Upgrade eset smart_security to a higher version than -