Login Request a demo
Unscored severity · published Mar 20, 2007
CVE-2007-1538
McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in…
–
CVSS
2%
EPSS
No
On KEV
Description
McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection or (2) HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion. NOTE: this issue has been disputed by third-party researchers, stating that the default permissions for HKEY_LOCAL_MACHINE\SOFTWARE does not allow for write access and the product does not modify the inherited permissions. There might be an interaction error with another product
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VE
Virusscan Enterprise · Mcafee
8.5i · source: NVD
Affected product
VE
Virusscan Enterprise
Mcafee
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1538
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1538
homepage.mac.com
http://homepage.mac.com/adonismac/Advisory/bypass_mcafee_entreprise_password.html
homepage.mac.com
http://homepage.mac.com/adonismac/Advisory/crack_mcafee_password_protection.html
www.osvdb.org
http://www.osvdb.org/33800
www.securityfocus.com
http://www.securityfocus.com/archive/1/463074/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/463091/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/463187/100/0/threaded
More from Virusscan Enterprise
8.4
CVE-2020-7267
Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not…
8.4
CVE-2020-7266
Privilege Escalation vulnerability in McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778 allows local users to delete files the user would otherwise…
8.1
CVE-2016-8024
Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated…
8.1
CVE-2016-8023
Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to…
8.0
CVE-2016-8020
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to execute arbitrary…