CA eTrust EZ Antivirus Insecure File Permissions

[Mobo]

A security issue has been reported in CA eTrust EZ Antivirus, which can be exploited by malicious, local users to bypass certain security restrictions or gain escalated privileges.

The problem is that insecure default file permissions are set on the installed files. This allows any user on the system to remove the files or replace them (e.g. the "VetMsg.exe" file, which runs as a system service).

Successful exploitation allows disabling the protection or execution of arbitrary code with SYSTEM privileges.

The security issue affects versions 7.0.0 through 7.0.4.

Solution:
Update to version 7.0.5.
http://crm.my-etrust.com/login.a...=DOCUME...nparameter=1952