Vulnerabilities > CVE-2000-0650 - Unspecified vulnerability in Network Associates Netshield and Virusscan
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |