NVD

Id
57880  
Name
CVE-2007-5829  
Description
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "Show Progress During Mount Scans" option is enabled.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.5  
CVSS Vector
(AV:L/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-05  
Modified Date
2011-07-13  
Seq
2007-5829  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296231 57880 CVE-2007-5829 http://securityresponse.symantec.com/avcenter/security/Content/2007.11.02.html  View
296232 57880 CVE-2007-5829 1018889  View
296233 57880 CVE-2007-5829 1018890  View
296234 57880 CVE-2007-5829 26253  View
296235 57880 CVE-2007-5829 ADV-2007-3698  View
296236 57880 CVE-2007-5829 symantec-av-mac-privilege-escalation(38229)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57606 JVNDB-2007-006298 Macintosh 用の Symantec AntiVirus などの製品の Disk Mount スキャナにおける root 権限を取得される脆弱性 Macintosh 用の Symantec AntiVirus、Norton AntiVirus、および Norton Internet Security の Disk Mount スキャナは、弱いパーミッション (group writable) でディレクトリを使用するため、root 権限を取得される脆弱性が存在します。 CVE-2007-5829 29184 CVE-2007-5829 57880 6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006298.html 2007-11-01 2012-12-20 View