CVE-2009-5116
McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which...
McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account.
Exploit likelihood
What each source reports
NVD Score used
McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account.
- Record
CVE-2009-5116- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account.
- Record
CVE-2009-5116- Updated
- 2026-11-02
EUVDEUVD-2009-5071 No score
McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account.
- Record
EUVD-2009-5071- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4r8g-96wp-vqm6 No score
McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which...
McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account.
- Record
GHSA-4r8g-96wp-vqm6- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-5116 is a medium vulnerability (CVSS 6.5) in Mcafee Linuxshield, published August 22, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.64%, the 76th percentile. No source names a fixed version.