Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/1326 | Vendor Advisory |
http://archives.neohapsis.com/archives/bugtraq/2000-06/0038.html | Vendor Advisory |
http://www.osvdb.org/6287 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/4641 |
Configurations
Information
Published : 2000-06-07 21:00
Updated : 2017-10-09 18:29
NVD link : CVE-2000-0502
Mitre link : CVE-2000-0502
JSON object : View
CWE
Products Affected
mcafee
- virusscan