Vulnerability in Mcafee Virusscan
CVE-2000-1128
The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\Program Files directory.
EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.
Affected products
- Mcafee Virusscan — versions 4.5
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, Patch, x_refsource_NTBUGTRAQ)