CVE-2005-2759 Privilege escalation in n/a
Local users can gain privileges via the setuid jlucaller program in Symantec Norton AntiVirus for Macintosh.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-2759?
CVE-2005-2759 is a high-severity vulnerability in Symantec Norton Antivirus, published on 20 Oct 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain privileges. NOTE: due to a CNA error, this candidate was also originally assigned to an issue in DiskMountNotify. Use CVE-2005-3270 for the DiskMountNotify issue, and CVE-2005-2759 for the LiveUpdate issue.
Which versions are affected by CVE-2005-2759?
It affects 1 product.
Products include Symantec Norton Antivirus.
How do I fix CVE-2005-2759?
No fix has been published for CVE-2005-2759 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-2759 being exploited?
There is no known exploitation of CVE-2005-2759 in the wild and no public exploit code.
Other vulnerabilities in Symantec Norton Antivirus
Sources
Also known as GHSA-c2fp-3f9v-gjcg.