Symantec Liveupdate vulnerabilities

5 vulnerabilities

Known vulnerabilities in Symantec Liveupdate, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2001-1126symantecliveupdate
EPSS score
2.60%
Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.9.8CVE-2001-1125symantecliveupdate
EPSS score
2.47%
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.4.6CVE-2001-0549symantecliveupdate
EPSS score
0.38%
Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords.5CVE-2002-0344symantecliveupdate
EPSS score
2.75%
Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.6.8CVE-2006-1836symantecliveupdate+5
EPSS score
0.39%
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.