{"id": "CVE-2007-1538", "bulletinFamily": "NVD", "title": "CVE-2007-1538", "description": "** DISPUTED ** McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MACHINE\\SOFTWARE\\McAfee\\DesktopProtection or (2) HKEY_LOCAL_MACHINE\\SOFTWARE\\Network Associates\\TVD\\VirusScan Entreprise\\CurrentVersion. NOTE: this issue has been disputed by third-party researchers, stating that the default permissions for HKEY_LOCAL_MACHINE\\SOFTWARE does not allow for write access and the product does not modify the inherited permissions. There might be an interaction error with another product.", "published": "2007-03-20T18:19:00", "modified": "2018-10-16T12:39:02", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1538", "reporter": "NVD", "references": ["http://www.securityfocus.com/archive/1/463074/100/0/threaded", "http://homepage.mac.com/adonismac/Advisory/crack_mcafee_password_protection.html", "http://homepage.mac.com/adonismac/Advisory/bypass_mcafee_entreprise_password.html", "http://www.securityfocus.com/archive/1/463187/100/0/threaded", "http://www.securityfocus.com/archive/1/463091/100/0/threaded", "http://www.securitytracker.com/id?1017791"], "cvelist": ["CVE-2007-1538"], "type": "cve", "lastseen": "2018-10-18T15:06:08", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:mcafee:virusscan_enterprise:8.5i"], "cvelist": ["CVE-2007-1538"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "** DISPUTED ** McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MACHINE\\SOFTWARE\\McAfee\\DesktopProtection or (2) HKEY_LOCAL_MACHINE\\SOFTWARE\\Network Associates\\TVD\\VirusScan Entreprise\\CurrentVersion. NOTE: this issue has been disputed by third-party researchers, stating that the default permissions for HKEY_LOCAL_MACHINE\\SOFTWARE does not allow for write access and the product does not modify the inherited permissions. There might be an interaction error with another product.", "edition": 1, "enchantments": {"score": {"modified": "2016-09-03T08:36:30", "value": 7.2, "vector": "NONE"}}, "hash": "c60e3b4156ea3f7dc3b920eb351243ee0492ce016a703960295e8d974c1875bc", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "f1951b4e5e650c326df1ba3c1ebc7410", "key": "title"}, {"hash": "2b47c20256105270c2520f1eb028eb14", "key": "href"}, {"hash": "b490bceff23d35c222ab4458fed5419e", "key": "published"}, {"hash": "aa49211fdcfa6337ed3635c0beef92c9", "key": "references"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "29a5262fb0c358ba7b9b0a3ad5a3192b", "key": "cpe"}, {"hash": "5cba4e3f93c888e901ce48664d920b15", "key": "description"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "655cb03fd6116e66541203fa017d2eb5", "key": "modified"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "c575a1b90a04a700e9fa8bb96c846225", "key": "cvelist"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1538", "id": "CVE-2007-1538", "lastseen": "2016-09-03T08:36:30", "modified": "2008-09-05T17:20:45", "objectVersion": "1.2", "published": "2007-03-20T18:19:00", "references": ["http://www.securityfocus.com/archive/1/archive/1/463091/100/0/threaded", "http://www.securityfocus.com/archive/1/archive/1/463187/100/0/threaded", "http://homepage.mac.com/adonismac/Advisory/crack_mcafee_password_protection.html", "http://homepage.mac.com/adonismac/Advisory/bypass_mcafee_entreprise_password.html", "http://www.securityfocus.com/archive/1/archive/1/463074/100/0/threaded", "http://www.securitytracker.com/id?1017791"], "reporter": "NVD", "scanner": [], "title": "CVE-2007-1538", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T08:36:30"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "29a5262fb0c358ba7b9b0a3ad5a3192b"}, {"key": "cvelist", "hash": "c575a1b90a04a700e9fa8bb96c846225"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "5cba4e3f93c888e901ce48664d920b15"}, {"key": "href", "hash": "2b47c20256105270c2520f1eb028eb14"}, {"key": "modified", "hash": "45c28d3c64c8f0d5a37fee0a2200e7a3"}, {"key": "published", "hash": "b490bceff23d35c222ab4458fed5419e"}, {"key": "references", "hash": "914db9c5cc82c4b23736be9597f3711c"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "f1951b4e5e650c326df1ba3c1ebc7410"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "a57a550d17d11d89a80904a929e6b3c4e9a0d1fb57fd1b91ddb2fe8fd474e392", "viewCount": 0, "enchantments": {"score": {"value": 7.2, "vector": "NONE", "modified": "2018-10-18T15:06:08"}, "vulnersScore": 7.2}, "objectVersion": "1.3", "cpe": ["cpe:/a:mcafee:virusscan_enterprise:8.5i"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}

{"osvdb": [{"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nMcAfee VirusScan Enterprise has been reported to contain a privilege escalation flaw that may allow a local user to gain access to the password protected virusscan console. The issue is triggered when the UIP value is cleared in the Windows registry under HKEY_LOCAL_MACHINE\\SOFTWARE\\McAfee\\DesktopProtection or HKEY_LOCAL_MACHINE\\SOFTWARE\\Network Associates\\TVD\\VirusScan Entreprise\\CurrentVersion.\n\nAdditional third-party examination indicates this is not an issue due to the security settings on the registry keys by default are not writable with only user permissions.\n## Solution Description\nThe vulnerability reported is incorrect. No solution required.\n## Short Description\nMcAfee VirusScan Enterprise has been reported to contain a privilege escalation flaw that may allow a local user to gain access to the password protected virusscan console. The issue is triggered when the UIP value is cleared in the Windows registry under HKEY_LOCAL_MACHINE\\SOFTWARE\\McAfee\\DesktopProtection or HKEY_LOCAL_MACHINE\\SOFTWARE\\Network Associates\\TVD\\VirusScan Entreprise\\CurrentVersion.\n\nAdditional third-party examination indicates this is not an issue due to the security settings on the registry keys by default are not writable with only user permissions.\n## References:\nSecurity Tracker: 1017791\nOther Advisory URL: http://homepage.mac.com/adonismac/Advisory/crack_mcafee_password_protection.html\nOther Advisory URL: http://homepage.mac.com/adonismac/Advisory/bypass_mcafee_entreprise_password.html\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-03/0235.html\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-03/0242.html\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-03/0252.html\n[CVE-2007-1538](https://vulners.com/cve/CVE-2007-1538)\n", "edition": 1, "reporter": "thesinoda()", "published": "2007-03-17T10:32:46", "title": "McAfee VirusScan Enterprise Registry Permission Weakness UIP Local Password Bypass", "type": "osvdb", "enchantments": {"score": {"vector": "NONE", "value": 7.2}}, "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2007-1538"], "modified": "2007-03-17T10:32:46", "href": "https://vulners.com/osvdb/OSVDB:33800", "id": "OSVDB:33800", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}