Vulnerability Description
Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Etrust Ez Antivirus | 7.0 |
References
- http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter
- http://www.idefense.com/application/poi/display?id=164
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18502
- http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter
- http://www.idefense.com/application/poi/display?id=164
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18502
FAQ
What is CVE-2004-1149?
CVE-2004-1149 is a vulnerability with a CVSS score of 7.2 (HIGH). Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical progra...
How severe is CVE-2004-1149?
CVE-2004-1149 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2004-1149?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Etrust Ez Antivirus.