• info
• discussion
• exploit
• solution
• references

Symantec LiveUpdate for Macintosh Local Privilege Escalation Vulnerability

Symantec LiveUpdate for Macintosh is prone to a local privilege-escalation vulnerability. This issue is due to the application's failure to properly use the PATH environment variable in some of its components.

A successful exploit allows local attackers to gain superuser privileges, leading to a complete compromise of the affected computer.