Symantec LiveUpdate Directory Traversal Vulnerability
BID:11606
Info
Symantec LiveUpdate Directory Traversal Vulnerability
| Bugtraq ID: | 11606 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 05 2004 12:00AM |
| Updated: | Nov 05 2004 12:00AM |
| Credit: | This issue was disclosed by HexView. |
| Vulnerable: |
Symantec LiveUpdate 2.5.56 .0 Symantec LiveUpdate 1.80.19 .0 |
| Not Vulnerable: | |
Discussion
Symantec LiveUpdate Directory Traversal Vulnerability
Symantec LiveUpdate is reported prone to a directory traversal vulnerability. It is reported that the application decompresses a directory tree without sufficient validation of directory names.
To carry out this attack, the attacker must establish a malicious server and then carry out a redirection type attack such as DNS cache poisoning to force LiveUpdate to download malicious archives from the attacker's server. It should also be noted that it is not reportedly possible to overwrite existing files on a vulnerable computer through this vulnerability.
It has been reported by the vendor that size restriction on files extracted and copied to an affected file system may reduce the impact of this issue by making it impossible to download malicious binary applications.
LiveUpdate versions 1.80.19.0 and 2.5.56.0 were reportedly affected by this issue. It is likely that other versions are affected as well.
Symantec LiveUpdate is reported prone to a directory traversal vulnerability. It is reported that the application decompresses a directory tree without sufficient validation of directory names.
To carry out this attack, the attacker must establish a malicious server and then carry out a redirection type attack such as DNS cache poisoning to force LiveUpdate to download malicious archives from the attacker's server. It should also be noted that it is not reportedly possible to overwrite existing files on a vulnerable computer through this vulnerability.
It has been reported by the vendor that size restriction on files extracted and copied to an affected file system may reduce the impact of this issue by making it impossible to download malicious binary applications.
LiveUpdate versions 1.80.19.0 and 2.5.56.0 were reportedly affected by this issue. It is likely that other versions are affected as well.
Exploit / POC
Symantec LiveUpdate Directory Traversal Vulnerability
An exploit is not required to leverage this issue.
An exploit is not required to leverage this issue.
Solution / Fix
Symantec LiveUpdate Directory Traversal Vulnerability
Solution:
Symantec has responded to the original post by stating that they are currently reviewing this issue. Please see the referenced Symantec message for more information.
Symantec has reviewed the issue and has released an advisory (SYM04-017) regarding this issue. Please see the referenced advisory for more information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Symantec has responded to the original post by stating that they are currently reviewing this issue. Please see the referenced Symantec message for more information.
Symantec has reviewed the issue and has released an advisory (SYM04-017) regarding this issue. Please see the referenced advisory for more information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Symantec LiveUpdate Directory Traversal Vulnerability
References:
References: