Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

McAfee VirusScan Enterprise lets local users bypass password

CVE-2007-1538 · published 19 years ago
Summary

McAfee VirusScan Enterprise 8.5.0.i stores a setting in Windows registry locations that can be changed by anyone with access to the computer. If altered, a local user could skip the program’s password check and gain access. Review and tighten the registry permissions or upgrade to a version that restricts access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
mcafee virusscan_enterprise 8.5i
cpe:2.3:a:mcafee:virusscan_enterprise:8.5i:*:*:*:*:*:*:*
Original advisory text
McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MAC...
McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in (1) HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection or (2) HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion. NOTE: this issue has been disputed by third-party researchers, stating that the default permissions for HKEY_LOCAL_MACHINE\SOFTWARE does not allow for write access and the product does not modify the inherited permissions. There might be an interaction error with another product
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Timeline
Published20 Mar 2007
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2007-1538 · NVD
Track software like this
Free during beta