NetSight
IP …
medium6.9

CVE-2012-0304

Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows local users to gain …

Impact

Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows local users to gain privileges via a Trojan horse file.

Affected products

VendorProductAffected versions
SymantecLiveupdate Administrator
through 2.3.0
Versions 1.5.3.21, 1.5.4, 1.5.7.19, 2.1.0, 2.1.2

Weakness classification

CWE-264

References