PT-2000-1584 · Mcafee · Mcafee Virusscan+1

Published 2000-07-11 · Updated 2017-10-10 · CVE-2000-0650

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions McAfee VirusScan versions 4.5 McAfee NetShield versions 4.5

Description The issue is related to insecure permissions for a specific registry key in the default installation of the software. This allows local users to execute arbitrary commands by replacing SETUP.EXE with a malicious file, potentially leading to unauthorized access and control.

Recommendations For McAfee VirusScan version 4.5, consider restricting access to the registry key that identifies the AutoUpgrade directory to prevent local users from replacing SETUP.EXE with a Trojan Horse. For McAfee NetShield version 4.5, restrict access to the registry key that identifies the AutoUpgrade directory to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2000-0650

Affected Products

Mcafee Netshield

Mcafee Virusscan

References · 6

• http://securityfocus.com/bid/1458 · Vendor Advisory
• http://ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0650 · Security Note
• http://osvdb.org/1458 · Note
• http://osvdb.org/4200 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5177 · Note