CVE-2012-0304 in Symantec LiveUpdate
요약 (영어)
Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows local users to gain privileges via a Trojan horse file.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
예약하다
2012. 01. 04.
공개
2012. 06. 22.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 5398 | Symantec LiveUpdate Tomcat (LUA Frontend) 권한 상승 | 264 | 개념 증명 | 공식 수정 | CVE-2012-0304 |