High severity7.0NVD Advisory· Published Apr 15, 2004· Updated Apr 16, 2026
CVE-2004-0217
CVE-2004-0217
Description
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.
Affected products
2cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus_scan_engine:4.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/bid/9662nvdBroken LinkPatchThird Party AdvisoryVDB EntryVendor Advisory
- marc.infonvdExploitMailing List
- exchange.xforce.ibmcloud.com/vulnerabilities/15215nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.