Dear thesinoda@xxxxxxxxxxx, Unprivileged user has no write access to HKEY_LOCAL_MACHINE\Software. This should not be an issue unless Mcafee weakens default permissions. -- ~/ZARAZA http://securityvulns.com/ One of the striking differences between a cat and a lie is that a cat has only nine lives. (Mark Twain) --Saturday, March 17, 2007, 3:13:41 AM, you wrote to bugtraq@xxxxxxxxxxxxxxxxx: thc> Bug Description thc> =============== thc> Mcafee virusscan Enterprise version allow you to lock the thc> user interface using a password. A user write access windows thc> registry. thc> The password is saved in UIP under the key thc> HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection thc> Or it can be under thc> HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Entreprise\CurrentVersion
