CVE-2007-5829: Medium severity Symantec Norton Antivirus vulnerability
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "Show Progress During Mount Scans" option is enabled.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5829?
CVE-2007-5829 is considered to have a medium severity due to the ability for local admin users to gain root privileges.
How do I fix CVE-2007-5829?
To fix CVE-2007-5829, modify the permissions of the affected directory to prevent group writable access.
What versions are affected by CVE-2007-5829?
CVE-2007-5829 affects Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x.
Who is impacted by CVE-2007-5829?
Local admin users on vulnerable systems are impacted by CVE-2007-5829 as they can exploit the weak permissions to gain elevated privileges.
Is there a workaround for CVE-2007-5829?
A potential workaround for CVE-2007-5829 is to regularly review and restrict access permissions on the directories used by the antivirus software.