CVE-2000-0650 | BDVDB-2026-2227 Detail

Description#

The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/1458
https://exchange.xforce.ibmcloud.com/vulnerabilities/5177
http://www.osvdb.org/1458
http://www.osvdb.org/4200
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753

Exploit#

No public exploit known

History#

Version 12001-05-07Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.