Vulnerability in Broadcom Etrust Ez Antivirus
CVE-2004-1149
Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.
EPSS: 0.004 (34.5th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Etrust_ez_antivirus — versions 7.0, 7.0.1, 7.0.1.1
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)