PT-2002-2418 · Symantec · Norton Internet Security

Publicado 2002-12-31 · Atualizado 2018-10-30 · CVE-2002-1695

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Norton Internet Security version 2001

Description The issue allows remote attackers to modify log file contents while the software is running, due to the use of FILE SHARE READ and FILE SHARE WRITE permissions when opening log files.

Recommendations For Norton Internet Security version 2001, consider restricting access to the log files to prevent modification by remote attackers until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1695

Produtos afetados

Norton Internet Security

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/7919 · Nota
• http://securityfocus.com/bid/3888 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1695 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1695 · Nota
• http://online.securityfocus.com/archive/1/250591 · Nota