CVE-2001-1125

Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site...

PT-2001-2267 · Symantec · Symantec Liveupdate

Name of the Vulnerable Software and Affected Versions: Symantec LiveUpdate versions prior to 1.6 Description: The issue allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site, due to the lack of cryptography to ensure the integrity of download files...

CVE-2001-0549

Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords...

Symantec LiveUpdate stores proxy server passwords in plaintext in registry

Overview A vulnerability exists in the way Symantec LiveUpdate stores proxy server passwords which could allow local users to have read access to the key. Description LiveUpdate version 1.5 stores proxy server passwords in clear text in the registry, under...