CVE-2004-0217

HIGH 7.0CVE-2004-0217 · Published 15/04/2004 · updated 16/06/2026

In short

CVE-2004-0217 is a HIGH (CVSS 7.0) vulnerability affecting antivirus scan engine (symantec).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 39.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
antivirus scan engine symantec	`= 4.0= 4.3`	No fix yet

Description

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.

References

marc.info · Exploit
securityfocus.com/bid/9662 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/15215 · Third Party Advisory

More vulnerabilities in antivirus scan engine

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

antivirus scan engine

symantec

= 4.0= 4.3

No fix yet

More vulnerabilities in antivirus scan engine

See all →