Another Symantec worm

[unixronin]

A gaping security flaw in the latest versions of Symantec's anti-virus software suite could put millions of users at risk of a debilitating worm attack, Internet security experts warned May 25.

Researchers at eEye Digital Security, the company that discovered the flaw, said it could be exploited by remote hackers to take complete control of the target machine "without any user action."

"This is definitely wormable.  Once exploited, you get a command shell that gives you complete access to the machine.  You can remove, edit or destroy files at will," said eEye Digital Security spokesperson Mike Puterbaugh.

"We have confirmed that an attacker can execute code without the user clicking or opening anything," Puterbaugh said.

I've said it before, I'll say it again.  Not even three words, three letters:

AVG

And for individual personal use, it's even free.

Comments

[unixronin.livejournal.com]

for having a low-footprint network-deployable virus/malware/worm scanner that's got easy central admin and reporting, Symantec Enterprise AV is actually pretty damn good from an ease-of-use/effectiveness weighup

Yeah, that's a valid point.

Does it still break trying to upgrade a machine from the standalone product (aka Norton AV) to the Symantec enterprise product? Ran into that when I was working at Ceva ... if you want it to work, you have to completely remove Norton first, THEN push Symantec. If you try to add the client to management by pushing the Symantec enterprise client as an upgrade, which you're supposed to be able to do, it won't work.