CVE-2004-1149
First published: Wed Dec 22 2004(Updated: )
Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom eTrust EZ Antivirus | =7.0 | |
| Broadcom eTrust EZ Antivirus | =7.0.1 | |
| Broadcom eTrust EZ Antivirus | =7.0.1.1 | |
| Broadcom eTrust EZ Antivirus | =7.0.1.2 | |
| Broadcom eTrust EZ Antivirus | =7.0.1.3 | |
| Broadcom eTrust EZ Antivirus | =7.0.1.4 | |
| Broadcom eTrust EZ Antivirus | =7.0.2 | |
| Broadcom eTrust EZ Antivirus | =7.0.2.1 | |
| Broadcom eTrust EZ Antivirus | =7.0.3 | |
| Broadcom eTrust EZ Antivirus | =7.0.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-1149?
CVE-2004-1149 is rated as a moderate severity vulnerability due to the potential for local privilege escalation.
How do I fix CVE-2004-1149?
To fix CVE-2004-1149, ensure that the permissions on the eTrust EZ Antivirus installation directory are properly configured to restrict access to unauthorized users.
Who is affected by CVE-2004-1149?
CVE-2004-1149 affects users of Broadcom eTrust EZ Antivirus versions 7.0.0 through 7.0.4.
What kind of attack does CVE-2004-1149 enable?
CVE-2004-1149 enables local users to replace critical antivirus programs with malicious versions, leading to potential system compromise.
Is there a patch available for CVE-2004-1149?
There is no specific patch provided for CVE-2004-1149, but securing the file permissions acts as a mitigation strategy.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/broadcom
- product/etrust ez antivirus
- canonical/broadcom etrust ez antivirus
- version/broadcom etrust ez antivirus/7.0
- version/broadcom etrust ez antivirus/7.0.1
- version/broadcom etrust ez antivirus/7.0.1.1
- version/broadcom etrust ez antivirus/7.0.1.2
- version/broadcom etrust ez antivirus/7.0.1.3
- version/broadcom etrust ez antivirus/7.0.1.4
- version/broadcom etrust ez antivirus/7.0.2
- version/broadcom etrust ez antivirus/7.0.2.1
- version/broadcom etrust ez antivirus/7.0.3
- version/broadcom etrust ez antivirus/7.0.4