CVE

Id
24895  
CVE No.
CVE-2007-1538  
Status
Candidate  
Description
** DISPUTED ** McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MACHINESOFTWAREMcAfeeDesktopProtection or (2) HKEY_LOCAL_MACHINESOFTWARENetwork AssociatesTVDVirusScan EntrepriseCurrentVersion. NOTE: this issue has been disputed by third-party researchers, stating that the default permissions for HKEY_LOCAL_MACHINESOFTWARE does not allow for write access and the product does not modify the inherited permissions. There might be an interaction error with another product.  
Phase
Assigned (20070320)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246796 24895 CVE-2007-1538 BUGTRAQ:20070317 Bypassing Mcafee Entreprise Password Protection  View
246797 24895 CVE-2007-1538 URL:http://www.securityfocus.com/archive/1/archive/1/463074/100/0/threaded  View
246798 24895 CVE-2007-1538 BUGTRAQ:20070317 Re: Bypassing Mcafee Entreprise Password Protection  View
246799 24895 CVE-2007-1538 URL:http://www.securityfocus.com/archive/1/archive/1/463091/100/0/threaded  View
246800 24895 CVE-2007-1538 BUGTRAQ:20070319 RE: Bypassing Mcafee Entreprise Password Protection  View
246801 24895 CVE-2007-1538 URL:http://www.securityfocus.com/archive/1/archive/1/463187/100/0/threaded  View
246802 24895 CVE-2007-1538 MISC:http://homepage.mac.com/adonismac/Advisory/bypass_mcafee_entreprise_password.html  View
246803 24895 CVE-2007-1538 MISC:http://homepage.mac.com/adonismac/Advisory/crack_mcafee_password_protection.html  View
246804 24895 CVE-2007-1538 OSVDB:33800  View
246805 24895 CVE-2007-1538 URL:http://www.osvdb.org/33800  View
246806 24895 CVE-2007-1538 SECTRACK:1017791  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54856 JVNDB-2007-003548 SQL-Ledger などの am.pl におけるディレクトリトラバーサルの脆弱性 (1) SQL-Ledger および (2) LedgerSMB の am.pl には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-1540 24895 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003548.html  View