Bypassing Mcafee Entreprise Password Protection Mar 17 2007 12:13AM
thesinoda hotmail com (1 replies)
Re: Bypassing Mcafee Entreprise Password Protection Mar 17 2007 04:44PM
3APA3A (3APA3A SECURITY NNOV RU) (1 replies)
Dear thesinoda (at) hotmail (dot) com [email concealed],

Unprivileged user has no write access to HKEY_LOCAL_MACHINE\Software.
This should not be an issue unless Mcafee weakens default permissions.

--
~/ZARAZA http://securityvulns.com/
One of the striking differences between a cat and a lie is
that a cat has only nine lives. (Mark Twain)

--Saturday, March 17, 2007, 3:13:41 AM, you wrote to bugtraq (at) securityfocus (dot) com [email concealed]:

thc> Bug Description
thc> ===============
thc> Mcafee virusscan Enterprise version allow you to lock the
thc> user interface using a password. A user write access windows
thc> registry.

thc> The password is saved in UIP under the key
thc> HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection

thc> Or it can be under

thc> HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion

[ reply ]
RE: Bypassing Mcafee Entreprise Password Protection Mar 19 2007 09:05AM
Rogheden Anders (Anders Rogheden sca com)


 

Privacy Statement
Copyright 2010, SecurityFocus