McAfee VirusScan 4.03 Alert File Vulnerability

The alerting mechanism in McAfee VirusScan 4.0.3 is accessible by any local user on the network. A local user is capable of sending an unlimited number of alerts to the Central Alert server.

Windows 9x clients send alerts in the form of text files which contain information such as username, computer name, virus name and so forth. This text file could be manipulated by a malicious user to contain arbitrary information. The alerts are stored on the Central Alert server in a directory to which all users have write, read, and delete permissions granted by default.


Privacy Statement
Copyright 2010, SecurityFocus