Symantec Norton AntiVirus and another Symantec security products for Macintosh privilege escalation updated since 20.10.2005
Published:		21.10.2005
Source:		SECUNIA
SecurityVulns ID:		5374
Type:		local
Level:		6/10
Description:		Norton Antivirus DiskMountNotify suid utility executes external applications by relative name. LiveUpdate contains suid wrapper for Java interpreter without proper command line check.

Affected:		SYMANTEC : Norton Utilities for Macintosh 8.0
		SYMANTEC : Norton AntiVirus for Macintosh 10.0
		SYMANTEC : Norton AntiVirus for Macintosh 9.0
		SYMANTEC : Norton Internet Security for Macintosh 3.0
		SYMANTEC : Norton Personal Firewall for Macintosh 3.0
		SYMANTEC : Norton SystemWorks for Macintosh 3.0

Original document		IDEFENSE, [Full-disclosure] iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation (21.10.2005)
		IDEFENSE, [Full-disclosure] iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation (21.10.2005)
		SECUNIA, [SA17268] Symantec Norton AntiVirus / LiveUpdate for Macintosh Privilege Escalation (20.10.2005)

Discuss:

Read or add your comments to this news (0 comments)