Lucene search

[email protected]CVE-2001-1126

HistoryOct 05, 2001 - 4:00 a.m.

CVE-2001-1126

2001-10-0504:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

symantec

liveupdate

vulnerability

remote attack

denial of service

dns spoofing

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

53.0%

JSON

Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.

CPENameOperatorVersion
symantec:liveupdatesymantec liveupdateeq1.5
symantec:liveupdatesymantec liveupdateeq1.6
symantec:liveupdatesymantec liveupdateeq1.4

CPE	Name	Operator	Version
symantec:liveupdate	symantec liveupdate	eq	1.5
symantec:liveupdate	symantec liveupdate	eq	1.6
symantec:liveupdate	symantec liveupdate	eq	1.4

References

www.sarc.com/avcenter/security/Content/2001.10.05.html

www.securityfocus.com/archive/1/218717

www.securityfocus.com/bid/3413

exchange.xforce.ibmcloud.com/vulnerabilities/7235

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

53.0%

JSON

Related for CVE-2001-1126

cvelist1