Symantec Norton Antivirus For Macintosh DiskMountNotify Local Privilege Escalation Vulnerability

Bugtraq ID:	15143
Class:	Design Error
CVE:	CVE-2005-2759
Remote:	No
Local:	Yes
Published:	Oct 19 2005 12:00AM
Updated:	Jul 12 2009 05:56PM
Credit:	Discovery is credited to DigitalMunition.com.
Vulnerable:	Symantec Norton Antivirus for Macintosh 10.0.1 Symantec Norton Antivirus for Macintosh 10.0 .0 Symantec Norton Antivirus for Macintosh 9.0.3 Symantec Norton Antivirus for Macintosh 9.0.2 Symantec Norton Antivirus for Macintosh 9.0.1 Symantec Norton Antivirus for Macintosh 9.0 .0
Not Vulnerable:	Symantec Symantec Antivirus for Macintosh 10.0

Symantec Norton Antivirus For Macintosh DiskMountNotify Local Privilege Escalation Vulnerability

Symantec Norton Antivirus for Macintosh is susceptible to a local privilege escalation vulnerability. This issue is due to a failure of the application to properly utilize the PATH environment variable in a setuid-superuser binary.

This vulnerability allows local attackers to gain superuser privileges, leading to complete compromise of the affected computer.

Symantec Norton Antivirus For Macintosh DiskMountNotify Local Privilege Escalation Vulnerability

An exploit is not required.

Symantec Norton Antivirus For Macintosh DiskMountNotify Local Privilege Escalation Vulnerability

Solution:
Symantec has released advisory SYM05-020, along with fixes to address this issue.

Symantec advises users to utilize the 'LiveUpdate' feature to install fixes on affected products.

Please see the referenced advisory for further information.

Symantec Norton Antivirus For Macintosh DiskMountNotify Local Privilege Escalation Vulnerability

References:

• Norton Antivirus for Macintosh Product Page (Symantec)
  
• SYM05-020 - Symantec Norton AntiVirus for Macintosh DiskMountNotify Local Privil (Symantec)
  
• Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation ("iDEFENSE Labs" )