CVE-2005-2766
Last modified
CVE-2005-2766 is a vulnerability of currently unknown severity. Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password to the internal LiveUpdate server.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password to the internal LiveUpdate server.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Norton Antivirus | 9.0.1.1.1000 |
| Symantec | Norton Antivirus | 9.0.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2766?
How severe is CVE-2005-2766?
How do I fix CVE-2005-2766?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2759** SPLIT ** The jlucaller program in LiveUpdate for Symantec…
- CVE-2005-2761Cross-site scripting (XSS) vulnerability in phpGroupWare 0.9…
- CVE-2005-2762Avaya VPNRemote before 4.2.33 stores credentials in cleartex…
- CVE-2005-2763Multiple format string vulnerabilities in OpenTTD before 0.4…
- CVE-2005-2764Multiple buffer overflows in OpenTTD before 0.4.0.1 allow at…
- CVE-2005-2765The user interface in the Windows Firewall does not properly…
- CVE-2005-2767Buffer overflow in LeapFTP allows remote attackers to execut…
- CVE-2005-2768Heap-based buffer overflow in the Sophos Antivirus Library, …
- CVE-2005-2769Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 …
- CVE-2005-2770WRQ Reflection for Secure IT Windows Server 6.0 (formerly kn…
- CVE-2005-2771WRQ Reflection for Secure IT Windows Server 6.0 (formerly kn…
- CVE-2005-2772Multiple stack-based buffer overflows in University of Minne…
Are you affected by CVE-2005-2766?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST