|
Posted by Adam Piggott on March 4, 2006, 3:24 pm
If you were Registered and logged in, you could reply and use other advanced thread options
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
FYI to AVG users.
- -------- Original Message --------
Date: 4 Mar 2006 03:56:19 -0000
From: redxii1234@hotmail.com
Subject: AVG 7 granting Everyone Full Control to updated files... even its
drivers
Newsgroups: gradwell.lists.bugtraq
There is more here: http://www.dslreports.com/forum/remark,15601404
Basically, a first time install of AVG 7 will have default permissions.
\Program Files\Grisoft\AVG Free has inherited permissions from \Program
Files. This is preferred, because lower privileged accounts can't damage it.
Once any files are updated, the permissions are changed to "Everyone" with
"Full Control" on the updated files, and will change the owner to whomever
is logged in. Even limited users become owners. That does not stop at
\Program Files\Grisoft\AVG Free, it will even do that to AVG's drivers in
%windir%\system32\drivers.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
iD8DBQFECfeW7uRVdtPsXDkRAirbAJwL/EE4ayzr5QwozoW8FdM8TFZwnwCcCGvK
TTS+e66aJ8Jzs0FYD08HpCY=
=U7qH
-----END PGP SIGNATURE-----
| 
XML site map