CVEvulnerability

CVE-2006-1836

6.8 MEDIUM Published 2006-04-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-04-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C

Description

Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.

Affected configurations

• symantec liveupdate 3.0 • symantec liveupdate 3.0.1 • symantec liveupdate 3.0.2 • symantec liveupdate 3.0.3 • symantec liveupdate 3.5 • symantec norton antivirus 9.0.0 • symantec norton antivirus 9.0.1 • symantec norton antivirus 9.0.2 • symantec norton antivirus 9.0.3 • symantec norton antivirus 10.0 • symantec norton antivirus 10.0.0 • symantec norton antivirus 10.0.1 • symantec norton antivirus 10.9.1 • symantec norton internet security 3.0 • symantec norton personal firewall 3.0 • symantec norton personal firewall 3.1 • symantec norton system works 3.0 • symantec norton utilities 8.0

References