Unscored severity · published Jul 11, 2000
CVE-2000-0650
The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netshield · Network Associates
4.5 · source: NVD
VI
Virusscan · Network Associates
4.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0650
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0650
Patch
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753
www.osvdb.org
http://www.osvdb.org/1458
www.osvdb.org
http://www.osvdb.org/4200
Patch
http://www.securityfocus.com/bid/1458
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/5177