CVE-2006-1836

Summary

Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://securityreason.com/securityalert/100
• http://www.securityfocus.com/bid/17571
• http://www.vupen.com/english/advisories/2006/1386
• http://www.securityfocus.com/archive/1/431318/100/0/threaded
• http://securitytracker.com/id?1015953
• http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html
• http://secunia.com/advisories/19682
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25839

References

• http://securityreason.com/securityalert/100
• http://www.securityfocus.com/bid/17571
• http://www.vupen.com/english/advisories/2006/1386
• http://www.securityfocus.com/archive/1/431318/100/0/threaded
• http://securitytracker.com/id?1015953
• http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html
• http://secunia.com/advisories/19682
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25839

• ←Previous
• Next→