CVEvulnerability
CVE-2000-0650
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2000-07-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.
Affected configurations
• network associates netshield 4.5
• network associates virusscan 4.5
References
- http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753 Patch, Vendor Advisory
- http://www.osvdb.org/1458 www.osvdb.org
- http://www.osvdb.org/4200 www.osvdb.org
- http://www.securityfocus.com/bid/1458 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5177 exchange.xforce.ibmcloud.com
- http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753 Patch, Vendor Advisory
- http://www.osvdb.org/1458 www.osvdb.org
- http://www.osvdb.org/4200 www.osvdb.org
- http://www.securityfocus.com/bid/1458 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5177 exchange.xforce.ibmcloud.com