Liveupdate (Symantec) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 43 known versions, newest CVE from 2006-04-19. Vendor: Symantec.

CVEs of Liveupdate

• CVE-2006-1836 - CVSS 6.8 (medium), 2006-04-19: Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which…
• CVE-2002-0344 - CVSS 5 (medium), 2002-06-25: Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may…
• CVE-2001-1126 - CVSS 5 (medium), 2001-10-05: Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the…
• CVE-2001-1125 - CVSS 9.8 (critical), 2001-10-05: Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code…
• CVE-2001-0549 - CVSS 4.6 (medium), 2001-08-14: Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords.