Unscored severity · published Jun 25, 2002
CVE-2002-0344
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Liveupdate · Symantec
through 1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0344
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0344
marc.info
http://marc.info/?l=bugtraq&m=101466781122312&w=2
marc.info
http://marc.info/?l=bugtraq&m=101496301307285&w=2
Patch
http://www.iss.net/security_center/static/8282.php
Exploit
http://www.securityfocus.com/bid/4170
More from Liveupdate
9.8
CVE-2001-1125
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the…
–
CVE-2006-1836
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to…
–
CVE-2001-1126
Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site
–
CVE-2001-0549
Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords