liveupdate administrator vulnerabilities and exploits

(subscribe to this query)

6.9

CVSSv2

Symantec LiveUpdate Administrator prior to 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows local users to gain privileges via a Trojan horse file.

Symantec Liveupdate Administrator 1.5.7.19 Symantec Liveupdate Administrator 1.5.4 Symantec Liveupdate Administrator Symantec Liveupdate Administrator 2.2.2.9 Symantec Liveupdate Administrator 1.5.3.21 Symantec Liveupdate Administrator 2.2.2 Symantec Liveupdate Administrator 2.2.1 Symantec Liveupdate Administrator 2.1.3 Symantec Liveupdate Administrator 2.1.2 Symantec Liveupdate Administrator 2.1.0

7.5

CVSSv2

The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x prior to 2.3.2.110 allows remote malicious users to reset arbitrary passwords by providing the e-mail address associated with a user account.

Symantec Liveupdate Administrator 2.1.3 Symantec Liveupdate Administrator 2.2.2 Symantec Liveupdate Administrator Symantec Liveupdate Administrator 2.1.0 Symantec Liveupdate Administrator 2.2.2.9 Symantec Liveupdate Administrator 2.3.0 Symantec Liveupdate Administrator 2.3.1 Symantec Liveupdate Administrator 2.1.2 Symantec Liveupdate Administrator 2.2.1

7.5

CVSSv2

SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x prior to 2.3.2.110 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Symantec Liveupdate Administrator 2.2.1 Symantec Liveupdate Administrator 2.2.2.9 Symantec Liveupdate Administrator 2.3.1 Symantec Liveupdate Administrator Symantec Liveupdate Administrator 2.1.0 Symantec Liveupdate Administrator 2.1.2 Symantec Liveupdate Administrator 2.1.3 Symantec Liveupdate Administrator 2.2.2 Symantec Liveupdate Administrator 2.3.0

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) prior to 2.3 allows remote malicious users to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the e...

Symantec Liveupdate Administrator 2.2.2 Symantec Liveupdate Administrator 2.2.1 Symantec Liveupdate Administrator 2.1.3 Symantec Liveupdate Administrator 2.1.2 Symantec Liveupdate Administrator 2.1.0 Symantec Liveupdate Administrator

1 EDB exploit

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in adduser.do in Symantec LiveUpdate Administrator (LUA) prior to 2.3 allows remote malicious users to hijack the authentication of administrators for requests that create new administrative accounts, and possibly have unspecified o...

Symantec Liveupdate Administrator 2.2.2.9

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook