high7.2
CVE-2004-1149
Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gai…
Impact
Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Etrust Ez Antivirus | Versions 7.0, 7.0.1, 7.0.1.1, 7.0.1.2, 7.0.1.3, 7.0.1.4 |
References
- NVD record
- CVE.org record
- http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter
- http://www.idefense.com/application/poi/display?id=164
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18502
- http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter
- http://www.idefense.com/application/poi/display?id=164
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18502