Vulnerabilities > CVE-1999-1555 - Unspecified vulnerability in Cheyenne Inoculan Anti-Virus Server

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
cheyenne
exploit available
NVD
Published: 1998-06-11
Updated: 2017-12-19

Summary

Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll.

Vulnerable Configurations

Part Description Count
Application
Cheyenne
1

Exploit-Db

descriptionCheyenne Inoculan for Windows NT 4.0 Share Vulnerability. CVE-1999-1555. Remote exploit for windows platform
idEDB-ID:19083
last seen2016-02-02
modified1998-06-10
published1998-06-10
reporterPaul Boyer
sourcehttps://www.exploit-db.com/download/19083/
titleCheyenne Inoculan for Windows NT 4.0 Share Vulnerability

References