high7.0
CVE-2004-0217
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary f…
Impact
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Antivirus Scan Engine | Versions 4.0, 4.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107694800908164&w=2
- http://www.securityfocus.com/bid/9662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15215
- http://marc.info/?l=bugtraq&m=107694800908164&w=2
- http://www.securityfocus.com/bid/9662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15215