English
Français
Light
Dark
System

Alert System

Stay informed at all times
Create an account Open a free account Login Manage your alerts

Symantec LiveUpdate 1.5

CPE Details

Symantec LiveUpdate 1.5
symantec
liveupdate
1.5
2007-08-23 19:16 +00:00
2007-09-14 15:36 +00:00
CPE NVD

Alerte pour un CPE

Stay informed of any changes for a specific CPE.
Alert management

CPE Name: cpe:2.3:a:symantec:liveupdate:1.5:*:*:*:*:*:*:*

Informations

Vendor

symantec

Product

liveupdate

Version

1.5

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2002-0344 2002-05-03 02:00 +00:00 Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.
5
CVE-2001-1125 2002-03-15 04:00 +00:00 Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.
9.8
CRITICAL
CVE-2001-1126 2002-03-15 04:00 +00:00 Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.
5
CVE-2001-0549 2002-03-09 04:00 +00:00 Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords.
4.6

More information
Click on the button to the left (OFF), to authorize the inscription of cookie improving the functionalities of the site. Click on the button to the left (Accept all), to unauthorize the inscription of cookie improving the functionalities of the site.