PT-1999-1607 · Nai · Nai Virusscan Nt

Published 1999-05-05 · Updated 2016-10-18 · CVE-1999-1195

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NAI VirusScan NT version 4.0.2

Description The issue arises when NAI VirusScan NT updates its virus definitions via FTP. Although the update process reports success, it fails to properly modify the scan.dat virus definition file. This could lead a system administrator to incorrectly assume that the virus definitions have been updated correctly.

Recommendations For NAI VirusScan NT version 4.0.2, as a temporary workaround, consider verifying the integrity of the scan.dat file after each update to ensure it has been correctly modified. Restrict access to the update mechanism until a proper fix is applied to prevent potential misuse. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1195

Affected Products

Nai Virusscan Nt

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1195 · Security Note
• http://securityfocus.com/bid/169 · Note
• http://marc.info/?l=bugtraq&m=92588169005196&w=2 · Note
• http://marc.info/?l=ntbugtraq&m=92587579032534&w=2 · Note