CVE-2004-0217: symantec antivirus_scan_engine Link Following
CVSS: 7.0v3.1HighModified
Published 16-03-2004Last modified 08-08-2024
Vulnerability summary
CVE-2004-0217 is a high (CVSS 7.0) Link Following vulnerability in symantec antivirus_scan_engine. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 38.3% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.0/10
010
High · v3.1 (NVD)EPSS score
0.46%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 16-03-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.
CVSS metrics
2 scores · 1 source · 2 versionsHigh 7.0Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesSingle source
Low 3.7Preferred score · NVD (NIST)
AV:L/AC:H/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
0.46%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
0.00 pp
From 0.46% on 19-09-2026
19-09-202619-10-2026
EPSS score0.46%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (marc.info)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Symantec1 product
- antivirus_scan_engine4.0 | 4.3
1 vendor · 1 product
References
3 links- www.securityfocus.com/bid/9662VDB EntryX Refsource BIDBroken LinkPatchThird Party AdvisoryVendor Advisory