Lucene search
MitreCVE-2003-0994HistorySep 01, 2004 - 4:00 a.m.
CVE-2003-0994
2004-09-0104:00:00
mitre
web.nvd.nist.gov
33
symantec
liveupdate
gui
vulnerability
local users
privileges
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
High
EPSS
0
Percentile
9.5%
The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain SYSTEM privileges.
Affected configurations
Node
symantecnorton_antivirusMatch2.1ms_exchange
ORsymantecnorton_antivirusMatch2001
ORsymantecnorton_antivirusMatch2001pro
ORsymantecnorton_antivirusMatch2002
ORsymantecnorton_antivirusMatch2002pro
ORsymantecnorton_antivirusMatch2003
ORsymantecnorton_antivirusMatch2003pro
ORsymantecnorton_antivirusMatch2004pro
ORsymantecnorton_antivirusMatchv3.0handhelds
ORsymantecnorton_internet_securityMatch2001
ORsymantecnorton_internet_securityMatch2001pro
ORsymantecnorton_internet_securityMatch2002
ORsymantecnorton_internet_securityMatch2002pro
ORsymantecnorton_internet_securityMatch2003
ORsymantecnorton_internet_securityMatch2003pro
ORsymantecnorton_internet_securityMatch2004
ORsymantecnorton_internet_securityMatch2004pro
ORsymantecnorton_system_worksMatch2001
ORsymantecnorton_system_worksMatch2002
ORsymantecnorton_system_worksMatch2003
ORsymantecnorton_system_worksMatch2004
ORsymantecwindows_liveupdateMatch1.70.x
ORsymantecwindows_liveupdateMatch1.90.x
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | norton_antivirus | 2.1 | cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:* |
| symantec | norton_antivirus | 2001 | cpe:2.3:a:symantec:norton_antivirus:2001:*:*:*:*:*:*:* |
| symantec | norton_antivirus | 2001 | cpe:2.3:a:symantec:norton_antivirus:2001:*:pro:*:*:*:*:* |
| symantec | norton_antivirus | 2002 | cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:* |
| symantec | norton_antivirus | 2002 | cpe:2.3:a:symantec:norton_antivirus:2002:*:pro:*:*:*:*:* |
| symantec | norton_antivirus | 2003 | cpe:2.3:a:symantec:norton_antivirus:2003:*:*:*:*:*:*:* |
| symantec | norton_antivirus | 2003 | cpe:2.3:a:symantec:norton_antivirus:2003:*:pro:*:*:*:*:* |
| symantec | norton_antivirus | 2004 | cpe:2.3:a:symantec:norton_antivirus:2004:*:pro:*:*:*:*:* |
| symantec | norton_antivirus | v3.0 | cpe:2.3:a:symantec:norton_antivirus:v3.0:*:handhelds:*:*:*:*:* |
| symantec | norton_internet_security | 2001 | cpe:2.3:a:symantec:norton_internet_security:2001:*:*:*:*:*:*:* |
Related
kaspersky
kaspersky
KLA10355 LPE vulnerability in Symantec
2004-02-03 00:00:00
securityvulns
securityvulns
SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM
2004-01-12 00:00:00
cvelist
cvelist
CVE-2003-0994
2004-09-01 04:00:00
nvd
nvd
CVE-2003-0994
2004-02-03 05:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
High
EPSS
0
Percentile
9.5%
Related for CVE-2003-0994