A flaw in McAfee Internet Security Suite 2005 could let employees sharing the same computer break into one another's files, according to security consultant iDefense.
The vulnerability, which exists in the default settings applied during installation, gives anyone the same access rights on a PC as an IT administrator. That, in effect, would let someone remove any restricted access specified on a PC, according to a report released by iDefense on Monday. It could also let an employee install software prohibited by his employer.
An employee who shares a computer with co-workers, for example, could then access colleagues' files or install programs on the machine.
Home users are unlikely to be affected by this flaw because they generally do not assign user restrictions on their PCs, said Michael Sutton, iDefense Labs director.
"This is not a high-risk vulnerability," Sutton said. "High-risk vulnerabilities are the ones where you can gain remote access of the PC. Here, you would have to get into the company's building and gain access to the computer."
McAfee was not immediately available for comment.
According to iDefense, McAfee is distributing a patch for Internet Security Suite 2005 to all registered users who have their settings on automatic updates. McAfee's suite offers virus protection, a firewall and privacy controls.
McAfee security is a nusant it is keeping me from doing my ****ignments. The pop-up continues to invade my privacy to do anything. I have to basically fight my way through to get anything done in my email or on the internet. This is very annoying especially when it keeps me from getting my ****ignments in on time. Please help me with this matter as soon as possible because I have an ****ignment to do on Saturday, April 23, 2005. The little McAfee Privacy Service is not something that I really need. There are other pop-ups but not quite as bad as McAfee. I am pleading for help in this matter. Would you believe that I had trouble trying to fill this information below? If this doesn't stop I will have no other choice but to discontine this and try to get something else that will benefit me. Right now is not a good time for the pop-ups interruptions.
Thanks,
MFEMFE