Author Topic: Secunia Advisory: SA19284  (Read 5212 times)

0 Members and 1 Guest are viewing this topic.

DaveD

  • Guest
Secunia Advisory: SA19284
« on: March 30, 2006, 08:48:34 PM »
http://secunia.com/advisories/19284/

Can this be patched through VPS updates or would this require and update newer then 4.6.763?

CharleyO

  • Guest
Re: Secunia Advisory: SA19284
« Reply #1 on: March 30, 2006, 09:53:55 PM »
***

This has already been discussed and a forum Search found this ......

http://forum.avast.com/index.php?topic=19862.0

Please read all of the post as a temporary solution is included.    :)


***

MeDIeVaL

  • Guest
Re: Secunia Advisory: SA19284
« Reply #2 on: December 08, 2007, 01:07:03 PM »
Got lots of advisories fro Secunia regarding avast! nowadays... I wonder why? ???

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11820
    • AVAST Software
Re: Secunia Advisory: SA19284
« Reply #3 on: December 08, 2007, 03:30:37 PM »
Lots of? I can see only one recent.

Shark

  • Guest
Re: Secunia Advisory: SA19284
« Reply #4 on: December 08, 2007, 04:36:33 PM »
This has already been discussed and a forum Search found this ......

http://forum.avast.com/index.php?topic=19862.0
I've read that post but I think the OP's question still stands. Does the fix require an uninstall/install or should toadfile's fix suggestion have to be manually done?

And finally, scanning my folder structure reveals that folder "[...]Avast4/DATA" has access rights to EVERYONE. Is this correct?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 87062
  • No support PMs thanks
Re: Secunia Advisory: SA19284
« Reply #5 on: December 08, 2007, 05:28:57 PM »
You don't say what access is given to Everyone.
Read Access is required to everyone otherwise they wouldn't be able to open the various files. Many in the DATA folder and sub-folders will also require Write access.

Had you looked over the original posters Secunia link you will see that it was fixed.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.10.6038 (build 22.10.7633.734) UI 1.0.733/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Shark

  • Guest
Re: Secunia Advisory: SA19284
« Reply #6 on: December 08, 2007, 07:55:13 PM »
Sorry if it wasn't clear, access to EVERYONE is FULL CONTROL.

I did read the post but I don't understand what is the meaning of fixed. Fixed for new installations, fixed through automatic updates, fixed through manual configuration.

And access to the "_avast4_" folder in Windows TEMP folder is also to EVERYONE and for FULL CONTROL. Is this the meaning of fixed?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 87062
  • No support PMs thanks
Re: Secunia Advisory: SA19284
« Reply #7 on: December 08, 2007, 08:11:04 PM »
I would say it was fixed by program update as per the image I posted from the secunia link. I would also have to take the word of those more knowledgeable than I that it is fixed as I'm unable to test. My partitions are FAT32 format not NTFS and I don't have this permission/security tab on the folder properties.

The _avast_ folder in the temp location is where avast unpacks files to be scanned if users couldn't 'write' to that folder it wouldn't work.

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.10.6038 (build 22.10.7633.734) UI 1.0.733/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Shark

  • Guest
Re: Secunia Advisory: SA19284
« Reply #8 on: December 08, 2007, 08:30:38 PM »
FULL CONTROL gives much more than "write" access, including the ability to take ownership, change access permissions, delete the folder and more... And EVERYONE means that you don't even have to be authenticated by Windows, which means that anonymous users also have those rights.

While I understand that the problem was officially "fixed" I maintain a healthy skepticism with my own system configuration since it doesn't appear to be right pertaining to that advisory. My version is 4.7.1043 so I wouldn't expect to see that kind of wide permission access.

Can anyone more knowledgeable please confirm how permission rights should be granted to Avast folders?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67235
Re: Secunia Advisory: SA19284
« Reply #9 on: December 08, 2007, 08:58:46 PM »
On Vista:
Users: Read, execute, list the contents.
Administrators and System: Full control access (not special permissions).
Autenticated users: Read, Write, Modify, list the contents... but not Full control.

On XP:
Users: Read, execute, list the contents.
Advanced Users: Read, execute, write, list the contents.
Administrators and System: Full control access (not special permissions).
Autenticated users: Read, Write, Modify, list the contents... but not Full control.
Owner Creator: special permissions.

Hope it helps.
The best things in life are free.