Design/Logic Flaw

2006-04-1916:06:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.6%

JSON

Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.

CPENameOperatorVersion
liveupdateeq3.5 macintosh
liveupdateeq3.0 macintosh
liveupdateeq3.0.3 macintosh
liveupdateeq3.0.1 macintosh
liveupdateeq3.0.2 macintosh
norton_antiviruseq9.0.0 macintosh
norton_antiviruseq9.0.2 macintosh
norton_antiviruseq10.0.0 macintosh
norton_antiviruseq9.0.3 macintosh
norton_antiviruseq10.0.1 macintosh

Name	Operator	Version
liveupdate	eq	3.5 macintosh
liveupdate	eq	3.0 macintosh
liveupdate	eq	3.0.3 macintosh
liveupdate	eq	3.0.1 macintosh
liveupdate	eq	3.0.2 macintosh
norton_antivirus	eq	9.0.0 macintosh
norton_antivirus	eq	9.0.2 macintosh
norton_antivirus	eq	10.0.0 macintosh
norton_antivirus	eq	9.0.3 macintosh
norton_antivirus	eq	10.0.1 macintosh

Rows per page:

1-10 of 181

References

secunia.com/advisories/19682

securityreason.com/securityalert/100

securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html

securitytracker.com/id?1015953

www.securityfocus.com/archive/1/431318/100/0/threaded

www.securityfocus.com/bid/17571

www.vupen.com/english/advisories/2006/1386

exchange.xforce.ibmcloud.com/vulnerabilities/25839