## Description

Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FULL CONTROL" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### cheyenne - inoculan_anti-virus_server

Affected Versions:

- *

## References

- http://www.securityfocus.com/archive/1/9515
  Exploit Patch Vendor Advisory
- http://www.securityfocus.com/bid/106
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1536
- http://www.securityfocus.com/archive/1/9515
  Exploit Patch Vendor Advisory
- http://www.securityfocus.com/bid/106
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1536

Neural Processor Active