What’s Vulnerable › Vulnerabilities

CVE-2004-1149

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-01-10 · updated 2026-06-16

Description

Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.

Affected products

• Broadcom Etrust Ez Antivirus: 7.0, 7.0.1, 7.0.1.1, 7.0.1.2, 7.0.1.3, 7.0.1.4 (+4)

References

• http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter
• http://www.idefense.com/application/poi/display?id=164
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18502
• http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter
• http://www.idefense.com/application/poi/display?id=164
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18502

Get alerted when CVE-2004-1149 or the next vulnerability affects your stack