CVE-2004-0217 — HIGH severity vulnerability (The LiveUpdate capability (liveupdate.sh) in Symantec AntiVi)
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.
| CVE ID | CVE-2004-0217 |
|---|---|
| Severity | HIGH |
| CVSS score | 7.0 |
| CVSS vector | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CWE | CWE-59 |
| Status | Modified |
| Published | 2004-04-15 |
| Last modified | 2026-04-16 |
| Description | The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log. |
| Source | NIST National Vulnerability Database |
🔍 Search all vulnerabilities →
$999/mo
Try CVECheck →