Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2000-0650 | First vendor Publication | 2000-07-11 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.1 | Attack Range | Local |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0650 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 | |
| Application | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 4200 | NAI NetShield AutoUpgrade SETUP.EXE Execution Validation NetShield contain a flaw that allows an attacker to replace the SETUP.EXE file with an arbitrary file. During the AutoUpgrade process, the arbitrary file will be run with the same privileges running NetShield (typically administrator) allowing arbitrary code to be executed. |
| 1458 | McAfee VirusScan AutoUpgrade SETUP.EXE Execution Validation VirusScan contain a flaw that allows an attacker to replace the SETUP.EXE file with an arbitrary file. During the AutoUpgrade process, the arbitrary file will be run with the same privileges running VirusScan (typically administrator) allowing arbitrary code to be executed. |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:24:44 |
|
| 2024-11-28 12:04:10 |
|
| 2021-05-04 12:01:10 |
|
| 2021-04-22 01:01:23 |
|
| 2020-05-23 00:14:25 |
|
| 2017-10-10 09:23:16 |
|
| 2016-06-28 14:53:17 |
|
| 2013-05-11 12:00:52 |
|
