Vulnerability in Kaspersky Lab Anti-Virus
CVE-2005-2582
Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the (1) log and (2) license directory, which allows local users to delete log files, append to arbitrary files via a symlink attack on kavmonitor.log, or delete license keys and prevent keepup2date from properly executing.
EPSS: 0.004 (34.5th percentile) — read the EPSS interpretation.
Affected products
- Kaspersky_lab Kaspersky_anti-virus — versions 5.0.5
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)