CVE-2012-0304 in Symantec LiveUpdate
摘要 (英语)
Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows local users to gain privileges via a Trojan horse file.
预定
2012-01-04
披露
2012-06-22
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 5398 | Symantec LiveUpdate Tomcat (LUA Frontend) 权限提升 | 264 | 概念验证 | 官方修复 | CVE-2012-0304 |