Lucene search

K
cveMitreCVE-2005-3270
HistoryOct 21, 2005 - 1:02 a.m.

CVE-2005-3270

2005-10-2101:02:00
mitre
web.nvd.nist.gov
24
cve-2005-3270
untrusted search path vulnerability
diskmountnotify
symantec norton antivirus 9.0.3
local users
privilege escalation
path manipulation
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.5%

Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file.

Affected configurations

Nvd
Node
symantecnorton_antivirusMatch9.0.3macintosh
VendorProductVersionCPE
symantecnorton_antivirus9.0.3cpe:2.3:a:symantec:norton_antivirus:9.0.3:*:macintosh:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.5%

Related for CVE-2005-3270