CVE

Id
29186  
CVE No.
CVE-2007-5829  
Status
Candidate  
Description
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "Show Progress During Mount Scans" option is enabled.  
Phase
Assigned (20071105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
306178 29186 CVE-2007-5829 CONFIRM:http://securityresponse.symantec.com/avcenter/security/Content/2007.11.02.html  View
306179 29186 CVE-2007-5829 BID:26253  View
306180 29186 CVE-2007-5829 URL:http://www.securityfocus.com/bid/26253  View
306181 29186 CVE-2007-5829 VUPEN:ADV-2007-3698  View
306182 29186 CVE-2007-5829 URL:http://www.vupen.com/english/advisories/2007/3698  View
306183 29186 CVE-2007-5829 OSVDB:40864  View
306184 29186 CVE-2007-5829 URL:http://osvdb.org/40864  View
306185 29186 CVE-2007-5829 SECTRACK:1018889  View
306186 29186 CVE-2007-5829 URL:http://securitytracker.com/id?1018889  View
306187 29186 CVE-2007-5829 SECTRACK:1018890  View
306188 29186 CVE-2007-5829 URL:http://securitytracker.com/id?1018890  View
306189 29186 CVE-2007-5829 SECUNIA:27488  View
306190 29186 CVE-2007-5829 URL:http://secunia.com/advisories/27488  View
306191 29186 CVE-2007-5829 XF:symantec-av-mac-privilege-escalation(38229)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57607 JVNDB-2007-006299 SSL-Explorer の fileSystem.do におけるディレクトリトラバーサルの脆弱性 SSL-Explorer の fileSystem.do には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-5831 29186 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006299.html  View