Re: Bypassing Mcafee Entreprise Password Protection

[3APA3A <3APA3A () SECURITY NNOV RU>]

Dear thesinoda () hotmail com,

 Unprivileged  user  has no write access to HKEY_LOCAL_MACHINE\Software.
 This should not be an issue unless Mcafee weakens default permissions.

-- 
~/ZARAZA http://securityvulns.com/
One of the striking differences between a cat and a lie is
that a cat has only nine lives. (Mark Twain)


--Saturday, March 17, 2007, 3:13:41 AM, you wrote to bugtraq () securityfocus com:


thc> Bug Description
thc> ===============
thc> Mcafee virusscan Enterprise version allow you to lock the
thc> user interface using a password. A user write access windows
thc> registry.

thc> The password is saved in UIP under the key
thc> HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection

thc> Or it can be under

thc> HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion