CVE-1999-1195
MediumExploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
NAI VirusScan NT 4.0.2 improperly modifies the scan.dat virus definition file during an FTP update, while reporting that the update was successful. This could mislead system administrators into believing that the definitions have been updated correctly.
Risk Assessment
There is a risk that administrators will use outdated virus definitions, which may lead to the failure to detect new threats and increase the system's vulnerability to attacks.
Recommendation
It is recommended to manually verify virus definition updates and monitor update logs to ensure that the scan.dat file has been correctly updated.
Original NVD description (English source)
NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.