Mcafee Change Control vulnerabilities

CVE-2013-7460 [MEDIUM] CWE-284 CVE-2013-7460: A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Con A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part of the Application Control whitelist and allows execution of binaries via specific conditions.

CVE-2013-7461 [MEDIUM] CWE-284 CVE-2013-7461: A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write protection rules via specific conditions.

CVE-2012-4593 [MEDIUM] CWE-264 CVE-2012-4593: McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password re McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command.