CVE-2000-1128

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse "common.exe" program in the C:\Program Files directory.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0073.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/1920Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0073.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/1920Exploit, Patch, Vendor Advisory

Timeline

Published: Jan 9, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-11295.0McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.CVE-2000-11307.5McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of CVE-2000-11317.5Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form CVE-2000-11326.4DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" varia CVE-2000-11335.0Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protected directory.CVE-2000-11347.2Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redir CVE-2000-11354.6fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.CVE-2000-11364.6elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other use CVE-2000-11374.6GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.CVE-2000-11387.5Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an a CVE-2000-11397.5The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain CVE-2000-11402.1Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot s