CVE-2004-0217

Опубликовано: 15 апр. 2004

Источник: nvd

CVSS3: 7

CVSS2: 3.7

EPSS Низкий

Описание

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.

Ссылки

http://marc.info/?l=bugtraq&m=107694800908164&w=2
Exploit
Mailing List
http://www.securityfocus.com/bid/9662
Broken Link
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15215
Third Party Advisory
VDB Entry
http://marc.info/?l=bugtraq&m=107694800908164&w=2
Exploit
Mailing List
http://www.securityfocus.com/bid/9662
Broken Link
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15215
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:*:*:*:*:*:*

cpe:2.3:a:symantec:antivirus_scan_engine:4.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:linux:-:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00134

Низкий

7 High

CVSS3

3.7 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

GHSA-4x77-wr7f-56wv