CVE-2005-2759
** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain privileges.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.42%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain privileges. NOTE: due to a CNA error, this candidate was also originally assigned to an issue in DiskMountNotify. Use CVE-2005-3270 for the DiskMountNotify issue, and CVE-2005-2759 for the LiveUpdate issue.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.42% probability · 35th percentile
- CISA KEV
- Not listed
- Affected
- symantec/norton antivirus
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/17268
- http://securitytracker.com/id?1015083
- http://www.idefense.com/application/poi/display?id=324&type=vulnerabilitiesVendor Advisory
- http://www.securityfocus.com/bid/15142
- http://www.symantec.com/avcenter/security/Content/2005.10.19a.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/17268
- http://securitytracker.com/id?1015083
- http://www.idefense.com/application/poi/display?id=324&type=vulnerabilitiesVendor Advisory
- http://www.securityfocus.com/bid/15142
- http://www.symantec.com/avcenter/security/Content/2005.10.19a.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.