Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

Norton AntiVirus 9.0.3 Mac LiveUpdate can let users become admin

CVE-2005-2759 · published 21 years ago
Summary

The LiveUpdate component called jlucaller on Mac runs with special system rights when it starts Java programs. Because of this, anyone with access to the computer could raise their privilege level and act as an administrator. Install the latest Symantec update or patch to remove the risky behavior and limit who can run Java programs through LiveUpdate.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
symantec norton_antivirus 9.0.3
cpe:2.3:a:symantec:norton_antivirus:9.0.3:*:macintosh:*:*:*:*:*
Original advisory text
** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain privileges. NOTE: due to...
** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain privileges. NOTE: due to a CNA error, this candidate was also originally assigned to an issue in DiskMountNotify. Use CVE-2005-3270 for the DiskMountNotify issue, and CVE-2005-2759 for the LiveUpdate issue.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published20 Oct 2005
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2005-2759 · NVD
Track software like this
Free during beta