From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Mar 10 2004 - 13:55:59 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Norton AntiVirus 2002 Virus Detection Bypass Issue

SECUNIA ADVISORY ID:
SA11046

VERIFY ADVISORY:
http://secunia.com/advisories/11046/

CRITICAL:
Less critical

IMPACT:
Security Bypass

WHERE:
Local system

SOFTWARE:
Norton AntiVirus 2002

DESCRIPTION:
Bipin Gautam has reported a security issue in Norton AntiVirus 2002,
which may result in malware being executed undetected.

An error in the Auto-Protect engine reportedly allows malware to be
executed undetected on a system under some circumstances. This can be
exploited by placing a malicious file in a nested sub-folder.

A bug was also reported, which may crash the front-end ("NAVW32.exe")
when performing a manual scan of a file or folder with a name
containing an ASCII control character. This doesn't affect the
Auto-Protect engine.

SOLUTION:
Grant only trusted users access to affected systems.

PROVIDED AND/OR DISCOVERED BY:
Bipin Gautam

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]