The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2001-05-07T04:00:00

Updated: 2024-08-08T05:28:40.599Z

Reserved: 2000-08-02T00:00:00

Link: CVE-2000-0650

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2000-07-11T04:00:00.000

Modified: 2024-11-20T23:32:59.070

Link: CVE-2000-0650

cve-icon Redhat

No data.