PT-2002-2418 · Symantec · Norton Internet Security

Published 2002-12-31 · Updated 2018-10-30 · CVE-2002-1695

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Norton Internet Security version 2001

Description The issue allows remote attackers to modify log file contents while the software is running, due to the use of FILE SHARE READ and FILE SHARE WRITE permissions when opening log files.

Recommendations For Norton Internet Security version 2001, consider restricting access to the log files to prevent modification by remote attackers until a patch is available.

Fix

Related Identifiers

CVE-2002-1695

Affected Products

Norton Internet Security

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1695 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7919 · Note
• http://securityfocus.com/bid/3888 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1695 · Note
• http://online.securityfocus.com/archive/1/250591 · Note