Description
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.
References
- 100 third-party-advisory
- 17571 vdb-entry
- ADV-2006-1386 vdb-entry
- 20060418 [Symantec Security Advisory] LiveUpdate for Macintosh Local Privilege Escalation mailing-list
- 1015953 vdb-entry
- http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html
- 19682 third-party-advisory
- liveupdate-exepath-env-privilege-escalation(25839) vdb-entry