PT-2004-1382 · Symantec+1 · Symantec Antivirus Scan Engine+1

CVE-2004-0217

·

Publicado

2004-03-16

·

Atualizado

2024-01-26

CVSS v2.0

3.7

Baixa

VetorAV:L/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Symantec AntiVirus Scan Engine versions 4.0 through 4.3
Description The issue allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log. This is related to the LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine for Red Hat Linux.
Recommendations For Symantec AntiVirus Scan Engine versions 4.0 through 4.3, consider restricting access to the liveupdate.sh script until a fix is available. As a temporary workaround, avoid using the LiveUpdate capability to minimize the risk of exploitation. Restrict write access to the /tmp/LiveUpdate.log file to prevent arbitrary file creation or appending.

Exploit

Correção

Link Following

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2004-0217

Produtos afetados

Red Hat
Symantec Antivirus Scan Engine