Computer Associates eTrust EZ Antivirus Local Insecure Default Installation Vulnerability
BID:11971
Info
Computer Associates eTrust EZ Antivirus Local Insecure Default Installation Vulnerability
| Bugtraq ID: | 11971 |
| Class: | Configuration Error |
| CVE: |
CVE-2004-1149 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 16 2004 12:00AM |
| Updated: | Jul 12 2009 09:26AM |
| Credit: | The individual or individuals responsible for disclosure of this issue is currently unknown; these issues were disclosed in the referenced iDEFENSE advisory. |
| Vulnerable: |
Computer Associates eTrust EZ Antivirus 7.0.4 Computer Associates eTrust EZ Antivirus 7.0.3 Computer Associates eTrust EZ Antivirus 7.0.2 .1 Computer Associates eTrust EZ Antivirus 7.0.2 Computer Associates eTrust EZ Antivirus 7.0.1 .4 Computer Associates eTrust EZ Antivirus 7.0.1 .3 Computer Associates eTrust EZ Antivirus 7.0.1 .2 Computer Associates eTrust EZ Antivirus 7.0.1 .1 Computer Associates eTrust EZ Antivirus 7.0.1 Computer Associates eTrust EZ Antivirus 7.0 |
| Not Vulnerable: |
Computer Associates eTrust EZ Antivirus 7.0.5 |
Discussion
Computer Associates eTrust EZ Antivirus Local Insecure Default Installation Vulnerability
A local insecure installation vulnerability affects eTrust EZ Antivirus. This issue is due to a failure of the application to properly secure files upon installation.
An attacker may leverage this issue to manipulate installed files, potentially allowing them to disable anti-virus protection or execute code with SYSTEM privileges.
A local insecure installation vulnerability affects eTrust EZ Antivirus. This issue is due to a failure of the application to properly secure files upon installation.
An attacker may leverage this issue to manipulate installed files, potentially allowing them to disable anti-virus protection or execute code with SYSTEM privileges.
Exploit / POC
Computer Associates eTrust EZ Antivirus Local Insecure Default Installation Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
Computer Associates eTrust EZ Antivirus Local Insecure Default Installation Vulnerability
Solution:
The vendor has resolved this issue in version 7.0.5 of the affected software. Users are advised to contact the vendor for details on obtaining the fixed packages.
Solution:
The vendor has resolved this issue in version 7.0.5 of the affected software. Users are advised to contact the vendor for details on obtaining the fixed packages.
References
Computer Associates eTrust EZ Antivirus Local Insecure Default Installation Vulnerability
References:
References:
- Computer Associates eTrust EZ Antivirus Insecure File Permission Vulnerability (iDEFENSE)
- eTrust EZAntivirus Home Page (Computer Associates)
- iDEFENSE Security Advisory 12.15.04: Computer Associates eTrust EZ Antivirus ("customer service mailbox"