PT-2005-2126 · Mcafee · Ca Internet Security Suite

Published 2005-04-18 · Updated 2008-09-05 · CVE-2005-1107

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee Internet Security Suite version 2005

Description The issue concerns insecure default ACLs for installed files, allowing local users to gain privileges or disable protection by modifying certain files.

Recommendations For McAfee Internet Security Suite version 2005, consider modifying the default ACLs to secure installed files and restrict access to sensitive areas to prevent privilege escalation or protection disablement. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-1107

Affected Products

Ca Internet Security Suite

References · 2

• http://idefense.com/application/poi/display?id=233&type=vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1107 · Security Note