PT-2000-1440 · Mcafee · Mcafee Virusscan

Published 2000-06-08 · Updated 2017-10-10 · CVE-2000-0502

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mcafee VirusScan version 4.03

Description The issue concerns improper access restriction to the alert text file, allowing local users to modify alerts arbitrarily before they are sent to the Central Alert Server.

Recommendations For Mcafee VirusScan version 4.03, consider restricting access to the alert text file to prevent local users from modifying alerts until a proper fix is applied.

Fix

Related Identifiers

CVE-2000-0502

Affected Products

Mcafee Virusscan

References · 5

• http://archives.neohapsis.com/archives/bugtraq/2000-06/0038.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0502 · Security Note
• http://securityfocus.com/bid/1326 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4641 · Note
• http://osvdb.org/6287 · Note