Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2004-0217

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Red Hat Linux 中的Symantec AntiVirus Scan Engine 4.0和4.3版本LiveUpdate (liveupdate.sh)功能存在漏洞。本地用户可以通过/tmp/LiveUpdate.log文件上的链接攻击创建或追加任意文件。

AI Predicted 6.5 Difficulty: Easy EPSS 0.46% · P39
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2004-0217

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Symantec AntiVirus Scan Engine For Red Hat Linux不安全临时文件漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Linux 中的Symantec AntiVirus Scan Engine 4.0和4.3版本LiveUpdate (liveupdate.sh)功能存在漏洞。本地用户可以通过/tmp/LiveUpdate.log文件上的链接攻击创建或追加任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2004-0217

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-0217

请登录查看更多情报信息。

Vendor Advisories for CVE-2004-0217 (2)

Mailing List Discussions for CVE-2004-0217 (1)

Same Patch Batch · n/a · 2004-03-16 · 21 CVEs total

CVE-2003-0594 Mozilla Browser Cookie路径限制绕过漏洞
CVE-2004-0224 Courier多个远程缓冲区溢出漏洞
CVE-2004-0107 Sysstat/lsag以不安全方式创建临时文件漏洞
CVE-2003-1039 SAP缓冲区溢出漏洞
CVE-2003-1038 SAP Internet Transaction Server (ITS)组件漏洞
CVE-2003-1037 SAP Internet Transaction Server (ITS)格式化字符串漏洞
CVE-2003-1036 SAP Internet Transaction Server(ITS)缓冲区溢出漏洞
CVE-2003-1035 SAP R/3 sapinfo RFC API帐户锁定漏洞
CVE-2003-1034 SAP DB RPM安装文件全局可写漏洞
CVE-2003-1033 SAP数据库开发工具INSTDBMSRV INSTROOT环境变量漏洞
CVE-2002-1576 SAP DB本地符号链接漏洞
CVE-2003-0593 Opera 路径遍历漏洞
CVE-2003-0592 多个供应商的互联网浏览器的cookie路径参数权限绕过漏洞
CVE-2003-0514 多个供应商的互联网浏览器的cookie路径参数限制绕过漏洞
CVE-2003-0513 Microsoft Internet Explorer 安全漏洞
CVE-2003-0257 IBM AIX打印子系统多个未明安全漏洞
CVE-2003-0202 Metrics不安全本地文件创建漏洞
CVE-2002-1579 SAP SAPgui远程拒绝服务攻击漏洞
CVE-2002-1578 ORACLE SAP R/3未授权数据访问漏洞
CVE-2002-1577 默认用户和密码客户端提升特权漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2004-0217

No comments yet

Leave a comment