CVE-2006-1836

Description

Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.

Affected products

• Symantec / liveupdate3.0 – 3.0
• Symantec / liveupdate3.0.1 – 3.0.1
• Symantec / liveupdate3.0.2 – 3.0.2
• Symantec / liveupdate3.0.3 – 3.0.3
• Symantec / liveupdate3.5 – 3.5
• Symantec / norton_antivirus9.0.0 – 9.0.0
• Symantec / norton_antivirus9.0.1 – 9.0.1
• Symantec / norton_antivirus9.0.2 – 9.0.2
• Symantec / norton_antivirus9.0.3 – 9.0.3
• Symantec / norton_antivirus10.0 – 10.0
• Symantec / norton_antivirus10.0.0 – 10.0.0
• Symantec / norton_antivirus10.0.1 – 10.0.1
• Symantec / norton_antivirus10.9.1 – 10.9.1
• Symantec / norton_internet_security3.0 – 3.0
• Symantec / norton_personal_firewall3.0 – 3.0
• Symantec / norton_personal_firewall3.1 – 3.1
• Symantec / norton_system_works3.0 – 3.0
• Symantec / norton_utilities8.0 – 8.0

References

• MISChttp://securityreason.com/securityalert/100
• MISChttp://www.securityfocus.com/bid/17571
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/1386
• MISChttp://www.securityfocus.com/archive/1/431318/100/0/threaded
• MISChttp://securitytracker.com/id?1015953
• MISChttp://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/19682
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/25839