CVE-2004-1149

Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions ACLs, which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe...

CVE-2004-1149

The CVE-2004-1149 issue concerns Computer Associates eTrust EZ Antivirus versions 7.0.0–7.0.4 (including 7.0.1.4). The root cause is insecure default file permissions (ACLs) applied during installation, allowing a local user to modify installed files and replace a program (notably VetMsg.exe) to ...

CVE-2004-1149: Undefined Security Weakness

Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions ACLs, which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe...

iDEFENSE Security Advisory 12.15.04: Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability

Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability iDEFENSE Security Advisory 12.15.04 http://www.idefense.com/application/poi/display?id=164 December 15, 2004 I. BACKGROUND Computer Associates eTrust EZ Antivirus is antivirus protection software for home and business...

CVE-2004-0267

The 1 inoregupdate, 2 uniftest, or 3 unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp...

CVE-2004-0933

CVE-2004-0933 affects Computer Associates CA InoculateIT 6.0, eTrust Antivirus (r6.0–r7.1), eTrust Antivirus for the Gateway (r7.0–r7.1), eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor (2.0–2.4), and EZ-Antivirus (6.1–6.3). The issue is a ZIP header handling flaw that lets re...

CVE-2004-0933: Undefined Security Weakness

Computer Associates CA InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection v...

CA eTrust SCM Detection

Binary data 4534.prm...

CVE-2004-0267

The 1 inoregupdate, 2 uniftest, or 3 unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp...

CVE-2004-0267

The CVE-2004-0267 issue affects eTrust InoculateIT for Linux 6.0, where the inoregupdate, uniftest, and unimove scripts allow local users to overwrite arbitrary files via a symlink attack on /tmp. Root cause: local permission/symlink abuse in those scripts. Impact: local users could modify arbitr...

CVE-2004-0267: Undefined Security Weakness

The 1 inoregupdate, 2 uniftest, or 3 unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp...

PT-2004-1421 · Ca · Etrust Inoculateit

Name of the Vulnerable Software and Affected Versions: eTrust InoculateIT for Linux version 6.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on files in /tmp, specifically through the inoregupdate, uniftest, or unimove scripts. Recommendations: For...

[local problems] eTrust Virus Protection 6.0 InoculateIT for linux

author: l0om [email protected] software: eTrust Virus Protection 6.0 InoculateIT for linux local phun with etrust antivirus 6.0 inoculateIT linux eTrust InnoculateIT 6.0 comes for the following OSes: -windows 95/98/ME -windows nt 4.0/2000 -novell netware 3.x 4.x 5.x -lotus notes/domino -mircosoft...

CVE-2004-2092

eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the application's registry and tmp directories, which allows local users to delete, modify, or examine sensitive information...

PT-2004-2988 · Ca · Etrust Inoculateit

Name of the Vulnerable Software and Affected Versions: eTrust InoculateIT for Linux version 6.0 Description: The issue concerns insecure permissions for multiple files and directories, including the application's registry and tmp directories. This allows local users to delete, modify, or examine...

CVE-2002-2285

eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection...

CVE-2000-0762

CVE-2000-0762 affects the default installation of eTrust Access Control (formerly SeOS). The vulnerability arises because the product uses a default encryption key, enabling remote attackers to spoof the eTrust administrator and escalate privileges. The available documents do not specify affected...

CVE-2000-0762

The default installation of eTrust Access Control formerly SeOS uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges...

CVE-2000-0762: Undefined Security Weakness

The default installation of eTrust Access Control formerly SeOS uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges...

CVE-2000-0762

The default installation of eTrust Access Control formerly SeOS uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges...