PT-2000-1584 · Mcafee · Mcafee Virusscan+1

Publicado 2000-07-11 · Atualizado 2017-10-10 · CVE-2000-0650

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions McAfee VirusScan versions 4.5 McAfee NetShield versions 4.5

Description The issue is related to insecure permissions for a specific registry key in the default installation of the software. This allows local users to execute arbitrary commands by replacing SETUP.EXE with a malicious file, potentially leading to unauthorized access and control.

Recommendations For McAfee VirusScan version 4.5, consider restricting access to the registry key that identifies the AutoUpgrade directory to prevent local users from replacing SETUP.EXE with a Trojan Horse. For McAfee NetShield version 4.5, restrict access to the registry key that identifies the AutoUpgrade directory to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2000-0650

Produtos afetados

Mcafee Netshield

Mcafee Virusscan

Referências · 6

• http://securityfocus.com/bid/1458 · Aviso do Fabricante
• http://osvdb.org/1458 · Nota
• http://osvdb.org/4200 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5177 · Nota
• http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0650 · Nota de Segurança