Title: McAfee VirusScan 4.03 Alert File Vulnerability
Severity: LOW
Description:
The alerting mechanism in McAfee VirusScan 4.0.3 is accessible by any local user on the network. A local user is capable of sending an unlimited number of alerts to the Central Alert server.
Windows 9x clients send alerts in the form of text files which contain information such as username, computer name, virus name and so forth. This text file could be manipulated by a malicious user to contain arbitrary information. The alerts are stored on the Central Alert server in a directory to which all users have write, read, and delete permissions granted by default.
Affected Products:
- McAfee VirusScan 4.0.3
References:
- McAfee: McAfee Homepage
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
