In.com
Join a billion hands
» Subscribe to Newsletter
» Switch to BizTech2.com
Home » News » Software » Worm Hits Symantec's Anti-virus Software
Worm Hits Symantec's Anti-virus Software
By: Sharon Khare   |   Dec 17, 2006
eEye Digital Security, developer of network security and vulnerability management software solutions, has discovered Big Yellow, a non-Microsoft-based malware that has both worm and botnet characteristics and is currently propagating in the wild using Symantec's anti-virus software.

Big Yellow exploits a vulnerability in the remote management interface for versions of Symantec AntiVirus and Symantec Client Security, which could be remotely exploited by an anonymous attacker to execute arbitrary code with SYSTEM privileges on an affected system, giving the attacker complete control.

Many IT departments are not prepared for attacks on non-Microsoft-based applications and have not yet deployed the patch available for this widely deployed anti-virus software.

eEye discovered this vulnerability in late May 2006 and worked with Symantec to create a patch at that time. However, many IT departments have not deployed this patch.

"Given the rapid discovery of critical security vulnerabilities within desktop applications other than Microsoft, the release of malware of this magnitude targeting non-Microsoft software was only a matter of time," said Marc Maiffret, eEye's founder and CTO. "IT urgently needs to understand that the new vector for attack will not come from Microsoft, but from the myriad applications that are scattered throughout its network. From anti-virus to iTunes, these non-Microsoft desktop applications, many of which IT is not even aware of, will become the enterprise's biggest point of vulnerability very, very quickly."

eEye's research team, discovered the Big Yellow malware late on December 14 on its 'honey pot' network — a network designed specifically to identify new classes of attack.

Click here for more info.
Tags:
 
Ads by Google 
Post a Comment on “Worm Hits Symantec's Anti-virus Software”
Comment : 
Name : 
City : 
Email : 
There are no comments on this article yet.
Why don't you post one?
Ads by Google 
Ads by Google
Products
Camcorders  |   Controllers  |   CPUs  |   Desktop PCs  |   Digital Cameras  |   Digital Video Recorders  |   DVD Players  |   Games  |   Gaming Consoles  |   General  |   GPS Systems  |   Handhelds / PDAs  |   Hard Drives  |   Headphones & Headsets  |   HiFi Audio Systems  |   Home Theater Systems  |   Input Devices  |   Internet  |   Laptops  |   lenovo  |   Low Level Components  |   Mac Systems  |   Mobile Phone Accessories  |   Mobile Phones  |   Monitors  |   Motherboards  |   MP3 / Audio Players  |   Multi-Function Devices  |   Networking  |   Optical Drives  |   PC Accessories  |   PC Add-on Cards  |   PC Cabinets  |   PC Games  |   Printers  |   Projectors  |   RAM Modules  |   Scanners  |   Software  |   Speakers  |   Telecom  |   TVs  |   Video Players  |  
Careers | About Us | Ad Inventory | Site Profile | Feedback | Copyright © 2007, Tech2.com India - A Network 18 India Venture