Norton Antivirus DiskMountNotify suid utility executes external applications by relative name. LiveUpdate contains suid wrapper for Java interpreter without proper command line check.
vulners.com/securityvulns/securityvulns:doc:9991
vulners.com/securityvulns/securityvulns:doc:9996
vulners.com/securityvulns/securityvulns:doc:9997