Dear thesinoda@hotmail.com,

Unprivileged user has no write access to HKEY_LOCAL_MACHINE\Software.
This should not be an issue unless Mcafee weakens default permissions.

--
~/ZARAZA http://securityvulns.com/
One of the striking differences between a cat and a lie is
that a cat has only nine lives. (Mark Twain)


--Saturday, March 17, 2007, 3:13:41 AM, you wrote to bugtraq@securityfocus.com:


thc> Bug Description
thc> ===============
thc> Mcafee virusscan Enterprise version allow you to lock the
thc> user interface using a password. A user write access windows
thc> registry.

thc> The password is saved in UIP under the key
thc> HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtecti on

thc> Or it can be under

thc> HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion