{"id":210,"date":"2006-05-26T09:20:26","date_gmt":"2006-05-26T09:20:26","guid":{"rendered":"https:\/\/www.darknet.org.uk\/2006\/05\/serious-symantec-anti-virus-vulnerability\/"},"modified":"2010-07-21T11:38:54","modified_gmt":"2010-07-21T10:38:54","slug":"serious-symantec-anti-virus-vulnerability","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2006\/05\/serious-symantec-anti-virus-vulnerability\/","title":{"rendered":"Serious Symantec Anti-Virus Vulnerability"},"content":{"rendered":"<p><!--adsense#Rectangle--><\/p>\n<p>Apparently a gaping security flaw in the latest versions of Symantec&#8217;s anti-virus software suite has been discovered that could put millions of users at risk of a debilitating worm attack. According to eEye Digital Security, the company that discovered the flaw, the vulnerability could be exploited by remote hackers to take complete control of the target machine &#8216;without any user action&#8217;.<\/p>\n<p>It sounds pretty serious.<\/p>\n<blockquote><p>&#8220;This is definitely wormable. Once exploited, you get a command shell that gives you complete access to the machine. You can remove, edit or destroy files at will,&#8221; said eEye Digital Security spokesperson Mike Puterbaugh.<\/p><\/blockquote>\n<p>Shame there are no real technical details, there is a <a href=\"http:\/\/www.eeye.com\/html\/research\/upcoming\/20060524.html\">brief advisory from eEye<\/a>.<\/p>\n<blockquote><p>A remotely exploitable vulnerability exists within the Symantec Antivirus program. This flaw does not require any end user interaction for exploitation and can compromise affected systems, allowing for the execution of malicious code with SYSTEM level access.<\/p><\/blockquote>\n<p>It is a vector that hasn&#8217;t been fully exploited yet, AV and Firewall software tends to run at system level, so if you can exploit it you pretty much have full control over the machine.<\/p>\n<blockquote><p>Internet security experts have long warned that flaws in anti-virus products will become a big target for malicious hackers. During the last 18 months, some of the biggest names in the anti-virus business have shipped critical software updates to cover code execution holes, prompting speculation among industry watchers that it&#8217;s only a matter of time before a malicious hacker is motivated to create a devastating network worm using security software flaws as the attack vector.<\/p><\/blockquote>\n<p>Something new to look out for?<\/p>\n<p><!--adsense#New468--><\/p>\n<p>Source: <a href=\"http:\/\/www.eweek.com\/article2\/0,1895,1967941,00.asp\">eWeek<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Apparently a gaping security flaw in the latest versions of Symantec&#8217;s anti-virus software suite has been discovered that could put millions of users at risk of a debilitating worm attack. According to eEye Digital Security, the company that discovered the flaw, the vulnerability could be exploited by remote hackers to take complete control of the [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[10,11],"tags":[521,38,37,623,142,468,510,112],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/210"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=210"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/210\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=210"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=210"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}