Critical severity · published Oct 5, 2001
CVE-2001-1125
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the…
9.8
CVSS
2.5%
EPSS
No
On KEV
Description
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Liveupdate · Symantec
before 1.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1125
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1125
Broken Link
http://www.sarc.com/avcenter/security/Content/2001.10.05.html
Broken Link
http://www.securityfocus.com/archive/1/218717
Broken Link
http://www.securityfocus.com/bid/3403
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7235
More from Liveupdate
–
CVE-2006-1836
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to…
–
CVE-2002-0344
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers…
–
CVE-2001-1126
Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site
–
CVE-2001-0549
Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords