CVE Vulnerabilities

CVE-2004-1149

Published: Jan 10, 2005 | Modified: Apr 09, 2021
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.

Affected Software

Name Vendor Start Version End Version
Etrust_ez_antivirus Broadcom 7.0 7.0
Etrust_ez_antivirus Broadcom 7.0.1 7.0.1
Etrust_ez_antivirus Broadcom 7.0.1.1 7.0.1.1
Etrust_ez_antivirus Broadcom 7.0.1.2 7.0.1.2
Etrust_ez_antivirus Broadcom 7.0.1.3 7.0.1.3
Etrust_ez_antivirus Broadcom 7.0.1.4 7.0.1.4
Etrust_ez_antivirus Broadcom 7.0.2 7.0.2
Etrust_ez_antivirus Broadcom 7.0.2.1 7.0.2.1
Etrust_ez_antivirus Broadcom 7.0.3 7.0.3
Etrust_ez_antivirus Broadcom 7.0.4 7.0.4

References