Unscored severity · published Apr 19, 2006
CVE-2006-1836
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Liveupdate · Symantec
3.0; 3.0.1; 3.0.2; 3.0.3; 3.5 · source: NVD
NA
Norton Antivirus · Symantec
9.0.0; 9.0.1; 9.0.2; 9.0.3; 10.0; 10.0.0; +2 more · source: NVD
NI
Norton Internet Security · Symantec
3.0 · source: NVD
NP
Norton Personal Firewall · Symantec
3.0; 3.1 · source: NVD
NS
Norton System Works · Symantec
3.0 · source: NVD
NU
Norton Utilities · Symantec
8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1836
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1836
Vendor Advisory
http://secunia.com/advisories/19682
securityreason.com
http://securityreason.com/securityalert/100
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html
securitytracker.com
http://securitytracker.com/id?1015953
www.securityfocus.com
http://www.securityfocus.com/archive/1/431318/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/17571
More from Liveupdate
9.8
CVE-2001-1125
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the…
–
CVE-2002-0344
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers…
–
CVE-2001-1126
Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site
–
CVE-2001-0549
Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords