Unscored CVE-2004-0217 EUVD-2004-0217GHSA-4x77-wr7f-56wv

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or a…

Published Mar 16, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.

References

9662 vdb-entry
symantec-scanengine-race-condition(15215) vdb-entry
20040216 Possible race condition in Symantec AntiVirus Scan Engine for Red mailing-list