CVE-2004-0217

  • Last update: May 9, 2024

Description

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.

Details

    • Severity: High
  • CVE: CVE-2004-0217
  • Published: Apr 15, 2004
  • Updated: May 9, 2024
  • Exploit:

CVSS v3

  • Severity: High
  • Score: 7
  • AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2

  • Severity: Low
  • Score: 3.7
  • AV:L/AC:H/Au:N/C:P/I:P/A:P

CWEs