Re: Bypassing Mcafee Entreprise Password Protection
Dear thesinoda@xxxxxxxxxxx,
Unprivileged user has no write access to HKEY_LOCAL_MACHINE\Software.
This should not be an issue unless Mcafee weakens default permissions.
--
~/ZARAZA http://securityvulns.com/
One of the striking differences between a cat and a lie is
that a cat has only nine lives. (Mark Twain)
--Saturday, March 17, 2007, 3:13:41 AM, you wrote to bugtraq@xxxxxxxxxxxxxxxxx:
thc> Bug Description
thc> ===============
thc> Mcafee virusscan Enterprise version allow you to lock the
thc> user interface using a password. A user write access windows
thc> registry.
thc> The password is saved in UIP under the key
thc> HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection
thc> Or it can be under
thc> HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan
Entreprise\CurrentVersion