BugTraq
AVG 7 granting Everyone Full Control to updated files... even its drivers Mar 04 2006 03:56AM
redxii1234 hotmail com (1 replies)
Re: AVG 7 granting Everyone Full Control to updated files... even its drivers Mar 08 2006 11:52AM
Matti Haack (m haack haack-it de)
Grisoft issued a fix for the Problem, wich installs with the
latest Update:

--- AVG Anti-Virus Update ---
(03/08/2006)

********************************
** AVG Anti-Virus 7.1 **
********************************

--- information about Update ---

Update Summary:

* fix for the too relaxed permission after the update
* changes in scanning core, mainly new generic getection of some
polymorphic viruses and support for more run-time compression
algorithms
* ability to set up exclusions for the detection of potentially
unwanted programs
* in firewall, ability to define new global rules and to step back
firewall configuration

Update your AVG Anti-Virus 7.1 using one of the following methods:

- Use the Update feature in AVG Anti-Virus 7.1 to perform your
update - select "Internet", and AVG will prompt you with the
update files appropriate for your installation.

- Use the appropriate link from below to download the Update file
to your hard drive. Then access the Update feature
in AVG Anti-Virus 7.1 - select "Folder" and indicate the location
of the Update file which you have downloaded.

Update file for all Program versions (size 4094665 bytes):
http://www.grisoft.cz/softw/70/update/u7fwf3845z.bin

Update file for all Program versions (size 6974519 bytes):
http://www.grisoft.cz/softw/70/update/u7f3845z.bin

Update file for all Program versions (size 1378218 bytes):
http://www.grisoft.cz/softw/70/update/u7hlpf3795z.bin

Update file for all Program versions (size 2638096 bytes):
http://www.grisoft.cz/softw/70/update/u7lngextf3785z.bin

All available Update files, including previous versions,
may be found at the following link:
http://www.grisoft.com/update/index.php?lng=com

--
GRISOFT

> There is more here: http://www.dslreports.com/forum/remark,15601404

> Basically, a first time install of AVG 7 will have default
> permissions. \Program Files\Grisoft\AVG Free has inherited
> permissions from \Program Files. This is preferred, because lower
> privileged accounts can't damage it.

> Once any files are updated, the permissions are changed to
> "Everyone" with "Full Control" on the updated files, and will change
> the owner to whomever is logged in. Even limited users become
> owners. That does not stop at \Program Files\Grisoft\AVG Free, it
> will even do that to AVG's drivers in %windir%\system32\drivers.

-
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de

Dieses Dokument ist ausschliesslich fuer den Adressaten bestimmt.
Jegliche Art von Reproduktion, Verbreitung, Vervielfaeltigung, Modifikation,
Verteilung und/oder Publikation dieser E-Mail-Nachricht ist untersagt,
soweit dies nicht ausdruecklich genehmigt wurde. Jegliche Haftung fur
Ansprueche, die aufgrund der Kommunikation per E-Mail begruendet
werden koennten, ist ausgeschlossen, soweit der Haftungsausschluss
gesetzlich zulaessig ist.

-- Ausgehende E-Mail wurde auf Viren gescannt --

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus