McAfee Internet Security Suite 2005 Insecure File Permissions

A security issue has been reported in McAfee Internet Security Suite 2005, which can be exploited by malicious, local users to gain escalated privileges.

Description:
A security issue has been reported in McAfee Internet Security Suite 2005, which can be exploited by malicious, local users to gain escalated privileges.

The problem is caused due to insecure default file ACLs allowing non-administrative users to modify the installed files. This can be exploited to gain escalated privileges by e.g. replacing a program running as a system service with a malicious program.

Solution:
The vendor has reportedly acknowledged the security issue and is providing automated fixes.

posted by Unknown @ 12:52