CVE-2001-1125

CVE-2001-1125 describes a critical vulnerability in Symantec LiveUpdate prior to version 1.6. The software failed to employ cryptography to verify the integrity of downloaded update files, making it susceptible to remote attackers. By performing DNS spoofing against update.symantec.com, an attacker could inject malicious updates, leading to arbitrary code execution on affected systems. This vulnerability carries a CVSS score of 9.8 (Critical), indicating a severe risk. It is easily exploitable over the network with low attack complexity and no user interaction required, potentially resulting in complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation (KEV: No) and no publicly available exploit code in Metasploit, Nuclei, or ExploitDB. However, the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness among security researchers.