CVE-2000-0650: Low severity Network Associates Virusscan vulnerability
The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0650?
CVE-2000-0650 is considered a high severity vulnerability due to the potential for local users to execute arbitrary commands.
How do I fix CVE-2000-0650?
To fix CVE-2000-0650, secure the permissions on the registry key associated with the AutoUpgrade directory to prevent unauthorized access.
Which versions are affected by CVE-2000-0650?
CVE-2000-0650 affects VirusScan 4.5 and NetShield 4.5 for Windows NT.
What is the impact of exploiting CVE-2000-0650?
Exploiting CVE-2000-0650 allows local users to replace SETUP.EXE with a Trojan Horse, potentially compromising system security.
Who is affected by CVE-2000-0650?
All users of the default installation of VirusScan 4.5 and NetShield 4.5 are affected by CVE-2000-0650 if proper security measures are not taken.