CVE-2005-2759: High severity Symantec Norton Antivirus vulnerability

Published Oct 20, 2005

Updated

SPLIT The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain privileges. NOTE: due to a CNA error, this candidate was also originally assigned to an issue in DiskMountNotify. Use CVE-2005-3270 for the DiskMountNotify issue, and CVE-2005-2759 for the LiveUpdate issue.

Affected Software

1 affected component

Symantec Norton Antivirus=9.0.3

Remediation

Patch Available

http://www.symantec.com/avcenter/security/Content/2005.10.19a.html

Event History

Oct 20, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2759?

CVE-2005-2759 is considered a high-severity vulnerability due to its potential for local privilege escalation.

How do I fix CVE-2005-2759?

To fix CVE-2005-2759, update to a newer version of Symantec Norton AntiVirus that addresses this privilege escalation issue.

Who is affected by CVE-2005-2759?

CVE-2005-2759 affects users of Symantec Norton AntiVirus version 9.0.3 on Macintosh systems.

What kind of vulnerability is CVE-2005-2759?

CVE-2005-2759 is a local privilege escalation vulnerability caused by improper setuid permissions in the jlucaller program.

Can CVE-2005-2759 be exploited remotely?

No, CVE-2005-2759 requires local access to the system to exploit the vulnerability.