Description
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.
References
- 4170 vdb-entry
- nav-liveupdate-plaintext-account(8282) vdb-entry
- 20020225 Symantec LiveUpdate mailing-list
- 20020228 Re: "Javier Sanchez" jsanchez157@hotmail.com 02/25/2002 11:14 AM, Symantec mailing-list