Symantec LiveUpdate Administrator Insecure Permissions Local Privilege Escalation (credentialed check)

NASLDB: Symantec LiveUpdate Administrator Insecure Permissions Local Privilege Escalation (credentialed check)

General

ID: 59193
Name: Symantec LiveUpdate Administrator Insecure Permissions Local Privilege Escalation (credentialed check)

Summary: Checks permissions of LUA install directory

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Port: 139
Family: Windows
Type: Local

Description

The version of Symantec LiveUpdate Administrator (LUA) installed on
the remote host has a privilege escalation vulnerability. The
installation directory allows write access to the Everyone group.
This directory contains batch files that are periodically executed as
SYSTEM. A local, unprivileged attacker could exploit this by creating
or modifying files that will be executed as SYSTEM, resulting in
privilege escalation.

A partial fix for this issue was included in LUA 2.3.1, but it does
not mitigate all possible attack vectors.