CVE-2000-0119: High severity McAfee VirusScan vulnerability
The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure McAfee VirusScan Plus to include the RECYCLED folder (Windows Recycle Bin) in real-time and scheduled scans so files in the RECYCLED folder are checked.
McAfee VirusScan Plus RECYCLED folder scanning = enabled - Configuration
Configure Symantec Norton Antivirus to include the RECYCLED folder (Windows Recycle Bin) in real-time and scheduled scans so files in the RECYCLED folder are checked.
Symantec Norton Antivirus RECYCLED folder scanning = enabled
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0119?
CVE-2000-0119 is considered a moderate severity vulnerability due to the potential for attackers to exploit it to store undetected malicious code.
How do I fix CVE-2000-0119?
To fix CVE-2000-0119, ensure that your antivirus software is configured to scan the RECYCLED folder and regularly update virus definitions.
Which software is affected by CVE-2000-0119?
CVE-2000-0119 affects McAfee VirusScan and Symantec Norton Antivirus that have default configurations.
What impact does CVE-2000-0119 have on system security?
CVE-2000-0119 allows attackers to hide malware in the RECYCLED folder, potentially leading to undetected infections.
Is there a workaround for CVE-2000-0119?
A workaround for CVE-2000-0119 is to manually configure antivirus settings to include scanning of the RECYCLED folder.