CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.0
CWE Name:  Permissions Privileges and Access Controls
Summary: the disk mount scanner in symantec antivirus for macintosh 9.x and 10.x, norton antivirus for macintosh 10.0 and 10.1, and norton internet security for macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "show progress during mount scans" option is enabled.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2007-11-05
Last Modified Date: 2017-07-29