Lucene search

K
cve[email protected]CVE-2007-5829
HistoryNov 05, 2007 - 7:46 p.m.

CVE-2007-5829

2007-11-0519:46:00
CWE-264
web.nvd.nist.gov
24
symantec
antivirus
macintosh
vulnerability
root privileges
local admin
nvd

7.2 High

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

15.2%

The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the “Show Progress During Mount Scans” option is enabled.

7.2 High

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

15.2%

Related for CVE-2007-5829