More holes found in Symantec security software

link to story



More holes found in Symantec security software

Bugs scuttle from under the patched rug


By INQUIRER staff: Thursday 22 April 2004, 09:12

FOUR MORE critical bugs have been found in three of Symantec?s security products.

The four vulnerabilities affect Norton Internet Security 2004, Norton Internet Security 2004 Professional, and Norton Personal Firewall 2004.

Security firm eEye Digital Security spotted the flaws but is refusing to issue too many details until Symantec gets around to issuing patches.

Three faults were remotely-exploitable vulnerabilities that allowed attackers to compromise default installations of the affected software and gain access of the host machine.

The fourth is a remotely-exploitable vulnerability that allows an anonymous attacker to execute a severe denial-of-service attack against systems running default installations of the affected software.

Symantec has been slow in patching a vulnerability eEye told it to fix 44 days ago. µ