Lucene search

K
cve[email protected]CVE-2005-3270
HistoryOct 21, 2005 - 1:02 a.m.

CVE-2005-3270

2005-10-2101:02:00
web.nvd.nist.gov
19
cve-2005-3270
untrusted search path vulnerability
diskmountnotify
symantec norton antivirus 9.0.3
local users
privilege escalation
path manipulation
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file.

Affected configurations

NVD
Node
symantecnorton_antivirusMatch9.0.3macintosh

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

Related for CVE-2005-3270