Vulnerability Details CVE-2004-0217
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.4%
CVSS Severity
CVSS v3 Score 7.0
CVSS v2 Score 3.7
References
Products affected by CVE-2004-0217
-
cpe:2.3:a:symantec:antivirus_scan_engine:4.0
-
cpe:2.3:a:symantec:antivirus_scan_engine:4.3
-
cpe:2.3:o:redhat:linux:-