Description
Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running.
References
- 3888 vdb-entry
- iis-modify-log(7919) vdb-entry
- 20020114 NMRC Advisory: OpenFile Win32 API Log Overwriting/Rewriting mailing-list