CVE-1999-1195 Business logic in n/a
NAI VirusScan falsely reports successful virus definition updates, potentially leaving systems unprotected against new threats.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-1195?
CVE-1999-1195 is a medium-severity vulnerability in n/a, published on 12 Sep 2001. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.
Which versions are affected by CVE-1999-1195?
It affects 1 product.
Products include Network Associates Virusscan.
How do I fix CVE-1999-1195?
No fix has been published for CVE-1999-1195 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-1195 being exploited?
There is no known exploitation of CVE-1999-1195 in the wild and no public exploit code.
Sources
Also known as GHSA-pm4g-gv9m-qf7v.