CERTA-2005-AVI-419
Vulnerability from certfr_avis - Published: 2005-10-20 - Updated: 2005-10-20
Deux vulnérabilités découvertes dans les produits Symantec pour Macintosh permettent à un utilisateur local mal intentionné d'élever ses privilèges.
Description
Une vulnérabilité dans le composant DiskMountNotify permet à un utilisateur local mal intentionné d'exécuter des commandes arbitraires avec les droits de l'administrateur système.
Une seconde vulnérabilité présente dans un composant de LiveUpdate peut être exploitée par une personne malveillante afin d'exécuter du code arbitraire avec les droits de l'administrateur système.
Solution
Appliquer les mises à jour de sécurité au moyen de Live Update.
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Symantec | N/A | LiveUpdate pour Macintoch 3.x ; | ||
| Symantec | N/A | Norton AntiVirus pour Macintosh 9.x ; | ||
| Symantec | N/A | Norton Utilities 8.x ; | ||
| Symantec | N/A | Norton SystemWorks 3.x. | ||
| Symantec | N/A | Norton Internet Security 3.x , | ||
| Symantec | N/A | Norton Personal Firewall 3.x ; | ||
| Symantec | N/A | Norton AntiVirus pour Macintosh 10.x ; |
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "LiveUpdate pour Macintoch 3.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Symantec",
"scada": false
}
}
},
{
"description": "Norton AntiVirus pour Macintosh 9.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Symantec",
"scada": false
}
}
},
{
"description": "Norton Utilities 8.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Symantec",
"scada": false
}
}
},
{
"description": "Norton SystemWorks 3.x.",
"product": {
"name": "N/A",
"vendor": {
"name": "Symantec",
"scada": false
}
}
},
{
"description": "Norton Internet Security 3.x ,",
"product": {
"name": "N/A",
"vendor": {
"name": "Symantec",
"scada": false
}
}
},
{
"description": "Norton Personal Firewall 3.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Symantec",
"scada": false
}
}
},
{
"description": "Norton AntiVirus pour Macintosh 10.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Symantec",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans le composant DiskMountNotify permet \u00e0 un\nutilisateur local mal intentionn\u00e9 d\u0027ex\u00e9cuter des commandes arbitraires\navec les droits de l\u0027administrateur syst\u00e8me.\n\nUne seconde vuln\u00e9rabilit\u00e9 pr\u00e9sente dans un composant de LiveUpdate peut\n\u00eatre exploit\u00e9e par une personne malveillante afin d\u0027ex\u00e9cuter du code\narbitraire avec les droits de l\u0027administrateur syst\u00e8me.\n\n## Solution\n\nAppliquer les mises \u00e0 jour de s\u00e9curit\u00e9 au moyen de Live Update.\n",
"cves": [],
"initial_release_date": "2005-10-20T00:00:00",
"last_revision_date": "2005-10-20T00:00:00",
"links": [
{
"title": "Site Internet de l\u0027\u00e9diteur :",
"url": "http://securityresponse.symantec.com/"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Syamntec SYM05-021 du 19 octobre 2005 :",
"url": "http://securityresponse.symantec.com/avcenter/security/Content/2005.10.19a.html"
}
],
"reference": "CERTA-2005-AVI-419",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2005-10-20T00:00:00.000000"
}
],
"risks": [
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Deux vuln\u00e9rabilit\u00e9s d\u00e9couvertes dans les produits Symantec pour\nMacintosh permettent \u00e0 un utilisateur local mal intentionn\u00e9 d\u0027\u00e9lever ses\nprivil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Symantec pour Mac OS",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Symantec SYM05-021 du 19 octobre 2005",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Syamntec SYM05-020 du 19 octobre 2005",
"url": "http://securityresponse.symantec.com/avcenter/security/Content/2005.10.19.html"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…