TITLE: AVG Anti-Virus Updated Files Insecure File Permissions SECUNIA ADVISORY ID: SA19118
VERIFY ADVISORY: http://secunia.com/advisories/19118/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: AVG Antivirus Professional http://secunia.com/product/336/ AVG Antivirus 6.x http://secunia.com/product/335/ AVG Anti-Virus Free Edition 7.x http://secunia.com/product/6489/ DESCRIPTION: A security issue in AVG Anti-Virus, which potentially can be exploited by malicious, local users to gain escalated privileges. The security issue is caused due to the File Update functionality assigning insecure permissions to files that have been updated. This can potentially be exploited by malicious users to delete or replace the updated files. The security issue has been confirmed in version 7.1.375 (Free Edition). Other versions may also be affected SOLUTION: Restrict user access to affected systems. ORIGINAL ADVISORY: http://www.dslreports.com/forum/remark,15601404 ============= PCWorks Mailing List ================= Don't see your post? Check our posting guidelines & make sure you've followed proper posting procedures, http://pcworkers.com/rules.htm Contact list owner <[EMAIL PROTECTED]> Unsubscribing and other changes: http://pcworkers.com =====================================================
