Vulnerability Name:

CVE-2000-0502 (CCN-4641)

Assigned:2000-06-07
Published:2000-06-07
Updated:2017-10-10
Summary:Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-Other
References:Source: BUGTRAQ
Type: Vendor Advisory
20000607 Mcafee Alerting DOS vulnerability

Source: CCN
Type: BugTraq Mailing List, Wed Jun 07 2000 - 17:28:07 CDT
Mcafee Alerting DOS vulnerability

Source: MITRE
Type: CNA
CVE-2000-0502

Source: OSVDB
Type: UNKNOWN
6287

Source: CCN
Type: OSVDB ID: 6287
McAfee VirusScan Unauthorized User Alert File Modification

Source: BID
Type: Vendor Advisory
1326

Source: CCN
Type: BID-1326
McAfee VirusScan 4.03 Alert File Vulnerability

Source: XF
Type: UNKNOWN
mcafee-unlimted-alerts(4641)

Source: XF
Type: UNKNOWN
mcafee-alerting-dos(4641)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:mcafee:virusscan:4.0.3:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:mcafee:virusscan:4.0.3:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    mcafee virusscan 4.0.3
    mcafee virusscan 4.0.3