The LiveUpdate capability (liveupdate.sh) in Symantec... · CVE-2004-0217 · GitHub Advisory Database · GitHub

The LiveUpdate capability (liveupdate.sh) in Symantec...

Low severity Unreviewed Published Apr 29, 2022 to the GitHub Advisory Database • Updated Feb 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.

References

Published by the National Vulnerability Database

Apr 15, 2004

Published to the GitHub Advisory Database Apr 29, 2022

Last updated Feb 4, 2024