Some components of Symantecs LiveUpdate for Macintosh do not set their execution path environment. A non-privileged user can change their execution path environment. If the user then executes one of these components, it will inherit the changed environment and use it to locate system commands. These components are configured to run with System Administrative privileges (SUID) and are vulnerable to a potential Trojan horse attack.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45877/LiveUpdate-mac.txt
Source: https://packetstormsecurity.com/files/45877/LiveUpdate-mac.txt.html