Vulnerabilities > CVE-2006-1836 - Local Privilege Escalation vulnerability in Symantec LiveUpdate for Macintosh

CVSS 6.8 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

local

low complexity

symantec

NVD

Published: 2006-04-19

Updated: 2018-10-18

Summary

Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.

Vulnerable Configurations

Part	Description	Count
Application	Symantec Symantec Liveupdate 3.0 Symantec Liveupdate 3.0.1 Symantec Liveupdate 3.0.2 Symantec Liveupdate 3.0.3 Symantec Liveupdate 3.5 Symantec Norton Antivirus 9.0.0 Symantec Norton Antivirus 9.0.1 Symantec Norton Antivirus 9.0.2 Symantec Norton Antivirus 9.0.3 Symantec Norton Antivirus 10.0 Symantec Norton Antivirus 10.0.0 Symantec Norton Antivirus 10.0.1 Symantec Norton Antivirus 10.9.1 Symantec Norton Internet Security 3.0 Symantec Norton Personal Firewall 3.0 Symantec Norton Personal Firewall 3.1 Symantec Norton System Works 3.0 Symantec Norton Utilities 8.0	18

Summary

Vulnerable Configurations

References