CVE-2004-0217: The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux a...

Security readout for executives and security teams

CVE-2004-0217 is an old local file-handling flaw in Symantec AntiVirus Scan Engine for Red Hat Linux. A local user could misuse LiveUpdate logging to create or append to files outside the intended log path. The business risk is mainly legacy infrastructure exposure, especially where old antivirus infrastructure still runs with elevated privileges. Exposure is likely limited to legacy Symantec AntiVirus Scan Engine 4.0 or 4.3 deployments on Red Hat Linux. Internet exposure is not indicated; the attacker must already have local user access on the affected host. Treat this as a legacy risk cleanup item unless the product is still active in production. Prioritize faster if affected hosts allow multiple local users or run LiveUpdate with elevated privileges. Mitigation focus: Inventory for Symantec AntiVirus Scan Engine 4.0 or 4.3 on Red Hat Linux.; Check current Broadcom or Symantec guidance for fixed versions or supported migration paths.; Retire or isolate unsupported Scan Engine hosts where feasible..

Prepared

Jun 30, 2026, 06:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.