medium6.0
CVE-2007-5829
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macinto…
Impact
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "Show Progress During Mount Scans" option is enabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Norton Antivirus | Versions 9.0, 9.0.1, 9.0.2, 9.0.3, 10.0, 10.1 |
| Symantec | Norton Internet Security | Version 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/40864
- http://secunia.com/advisories/27488
- http://securityresponse.symantec.com/avcenter/security/Content/2007.11.02.html
- http://securitytracker.com/id?1018889
- http://securitytracker.com/id?1018890
- http://www.securityfocus.com/bid/26253
- http://www.vupen.com/english/advisories/2007/3698
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38229
- http://osvdb.org/40864
- http://secunia.com/advisories/27488
- http://securityresponse.symantec.com/avcenter/security/Content/2007.11.02.html
- http://securitytracker.com/id?1018889
- http://securitytracker.com/id?1018890
- http://www.securityfocus.com/bid/26253
- http://www.vupen.com/english/advisories/2007/3698
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38229