CVE-2004-0217: Symantec Antivirus Scan Engine

High severity, CVSS 7.0. EPSS: 0.5% chance of exploitation in the next 30 days.

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.

Affected products

• Symantec Antivirus Scan Engine: version 4.0 only; version 4.3 only

Published 2004-04-15. Last modified 2026-06-16.