Vulnerabilities > CVE-2005-2582 - Local Security vulnerability in Kaspersky LAB Kaspersky Anti-Virus 5.0.5

047910
CVSS 3.6 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
kaspersky-lab

Summary

Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the (1) log and (2) license directory, which allows local users to delete log files, append to arbitrary files via a symlink attack on kavmonitor.log, or delete license keys and prevent keepup2date from properly executing.

Vulnerable Configurations

Part Description Count
Application
Kaspersky_Lab
1