CVE-2006-1836

Description

Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25839

http://www.vupen.com/english/advisories/2006/1386

http://www.securityfocus.com/bid/17571

http://www.securityfocus.com/archive/1/431318/100/0/threaded

http://securitytracker.com/id?1015953

http://securityresponse.symantec.com/avcenter/security/Content/2006.04.17b.html

http://securityreason.com/securityalert/100

http://secunia.com/advisories/19682

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS