CVE-2006-1836
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.
- Score
- CVSS 2.0 6.8 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2006-04-19
- Last modified
- 2024-08-07
Affected products
- Liveupdate (Symantec)
- Norton Antivirus (Symantec)
- Norton Internet Security (Symantec)
- Norton Personal Firewall (Symantec)
- Norton System Works (Symantec)
- Norton Utilities (Symantec)
References
- http://secunia.com/advisories/19682
- http://securityreason.com/securityalert/100
- http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html
- http://securitytracker.com/id?1015953
- http://www.securityfocus.com/archive/1/431318/100/0/threaded
- http://www.securityfocus.com/bid/17571
- http://www.vupen.com/english/advisories/2006/1386
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25839
