high7.2Public exploit code
CVE-1999-1555
Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows lo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cheyenne Inoculan for Windows NT 4.0 - Share1998-06-10 · remote · windows · Verified
Impact
Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cheyenne | Inoculan Anti-Virus Server | through 4.0 |