Tillbaka till svenska Fidonet
English   Information   Debug  
OS2BBS   0/787
OS2DOSBBS   0/580
OS2HW   0/42
OS2INET   0/37
OS2LAN   0/134
OS2PROG   0/36
OS2REXX   0/113
OS2USER-L   207
OS2   0/4785
OSDEBATE   0/18996
PASCAL   0/490
PERL   0/457
PHP   0/45
POINTS   0/405
POLITICS   0/29554
POL_INC   0/14731
PSION   103
R20_ADMIN   1117
R20_AMATORRADIO   0/2
R20_BEST_OF_FIDONET   13
R20_CHAT   0/893
R20_DEPP   0/3
R20_DEV   399
R20_ECHO2   1379
R20_ECHOPRES   0/35
R20_ESTAT   0/719
R20_FIDONETPROG...
...RAM.MYPOINT
  0/2
R20_FIDONETPROGRAM   0/22
R20_FIDONET   0/248
R20_FILEFIND   0/24
R20_FILEFOUND   0/22
R20_HIFI   0/3
R20_INFO2   2810
R20_INTERNET   0/12940
R20_INTRESSE   0/60
R20_INTR_KOM   0/99
R20_KANDIDAT.CHAT   42
R20_KANDIDAT   28
R20_KOM_DEV   112
R20_KONTROLL   0/13068
R20_KORSET   0/18
R20_LOKALTRAFIK   0/24
R20_MODERATOR   0/1852
R20_NC   76
R20_NET200   245
R20_NETWORK.OTH...
...ERNETS
  0/13
R20_OPERATIVSYS...
...TEM.LINUX
  0/44
R20_PROGRAMVAROR   0/1
R20_REC2NEC   534
R20_SFOSM   0/340
R20_SF   0/108
R20_SPRAK.ENGLISH   0/1
R20_SQUISH   107
R20_TEST   2
R20_WORST_OF_FIDONET   12
RAR   0/9
RA_MULTI   106
RA_UTIL   0/162
REGCON.EUR   0/2055
REGCON   0/13
SCIENCE   0/1206
SF   0/239
SHAREWARE_SUPPORT   0/5146
SHAREWRE   0/14
SIMPSONS   0/169
STATS_OLD1   0/2539.065
STATS_OLD2   0/2530
STATS_OLD3   0/2395.095
STATS_OLD4   0/1692.25
SURVIVOR   0/495
SYSOPS_CORNER   0/3
SYSOP   0/84
TAGLINES   0/112
TEAMOS2   0/4530
TECH   0/2617
TEST.444   0/105
TRAPDOOR   0/19
TREK   0/755
TUB   0/290
UFO   0/40
UNIX   0/1316
USA_EURLINK   0/102
USR_MODEMS   0/1
VATICAN   0/2740
VIETNAM_VETS   0/14
VIRUS   0/378
VIRUS_INFO   0/201
VISUAL_BASIC   0/473
WHITEHOUSE   0/5187
WIN2000   0/101
WIN32   0/30
WIN95   0/4277
WIN95_OLD1   0/70272
WINDOWS   0/1517
WWB_SYSOP   0/419
WWB_TECH   0/810
ZCC-PUBLIC   0/1
ZEC   4

 
4DOS   0/134
ABORTION   0/7
ALASKA_CHAT   0/506
ALLFIX_FILE   0/1313
ALLFIX_FILE_OLD1   0/7997
ALT_DOS   0/152
AMATEUR_RADIO   0/1039
AMIGASALE   0/14
AMIGA   0/331
AMIGA_INT   0/1
AMIGA_PROG   0/20
AMIGA_SYSOP   0/26
ANIME   0/15
ARGUS   0/924
ASCII_ART   0/340
ASIAN_LINK   0/651
ASTRONOMY   0/417
AUDIO   0/92
AUTOMOBILE_RACING   0/105
BABYLON5   0/17862
BAG   135
BATPOWER   0/361
BBBS.ENGLISH   0/382
BBSLAW   0/109
BBS_ADS   0/5290
BBS_INTERNET   0/507
BIBLE   0/3563
BINKD   0/1119
BINKLEY   0/215
BLUEWAVE   0/2173
CABLE_MODEMS   0/25
CBM   0/46
CDRECORD   0/66
CDROM   0/20
CLASSIC_COMPUTER   0/378
COMICS   0/15
CONSPRCY   0/899
COOKING   28587
COOKING_OLD1   0/24719
COOKING_OLD2   0/40862
COOKING_OLD3   0/37489
COOKING_OLD4   0/35496
COOKING_OLD5   9370
C_ECHO   0/189
C_PLUSPLUS   0/31
DIRTY_DOZEN   0/201
DOORGAMES   0/2024
DOS_INTERNET   0/196
duplikat   6000
ECHOLIST   0/18295
EC_SUPPORT   0/318
ELECTRONICS   0/359
ELEKTRONIK.GER   1534
ENET.LINGUISTIC   0/13
ENET.POLITICS   0/4
ENET.SOFT   0/11701
ENET.SYSOP   33806
ENET.TALKS   0/32
ENGLISH_TUTOR   0/2000
EVOLUTION   0/1335
FDECHO   0/217
FDN_ANNOUNCE   0/7068
FIDONEWS   23548
FIDONEWS_OLD1   0/49742
FIDONEWS_OLD2   0/35949
FIDONEWS_OLD3   0/30874
FIDONEWS_OLD4   0/37224
FIDO_SYSOP   12847
FIDO_UTIL   0/180
FILEFIND   0/209
FILEGATE   0/212
FILM   0/18
FNEWS_PUBLISH   4200
FN_SYSOP   41525
FN_SYSOP_OLD1   71952
FTP_FIDO   0/2
FTSC_PUBLIC   0/13586
FUNNY   0/4886
GENEALOGY.EUR   0/71
GET_INFO   105
GOLDED   0/408
HAM   0/16053
HOLYSMOKE   0/6791
HOT_SITES   0/1
HTMLEDIT   0/71
HUB203   466
HUB_100   264
HUB_400   39
HUMOR   0/29
IC   0/2851
INTERNET   0/424
INTERUSER   0/3
IP_CONNECT   719
JAMNNTPD   0/233
JAMTLAND   0/47
KATTY_KORNER   0/41
LAN   0/16
LINUX-USER   0/19
LINUXHELP   0/1155
LINUX   0/22012
LINUX_BBS   0/957
mail   18.68
mail_fore_ok   249
MENSA   0/341
MODERATOR   0/102
MONTE   0/992
MOSCOW_OKLAHOMA   0/1245
MUFFIN   0/783
MUSIC   0/321
N203_STAT   900
N203_SYSCHAT   313
NET203   321
NET204   69
NET_DEV   0/10
NORD.ADMIN   0/101
NORD.CHAT   0/2572
NORD.FIDONET   189
NORD.HARDWARE   0/28
NORD.KULTUR   0/114
NORD.PROG   0/32
NORD.SOFTWARE   0/88
NORD.TEKNIK   0/58
NORD   0/453
OCCULT_CHAT   0/93
Möte OSDEBATE, 18996 texter
 lista första sista föregående nästa
Text 11127, 85 rader
Skriven 2006-05-27 09:48:02 av Mike '/m' (1:379/45)
Ärende: Symantec's Really Bad Year Gains Momentum
=================================================
From: Mike '/m' <mike@barkto.com>


http://www.emailbattles.com/archive/battles/vuln_aadhffhdji_fg/

===
While testing its Windows security software, Blink, with Symantec Antivirus,
eEye Digital Security techs discovered:

   A remotely exploitable vulnerability exists within the
   Symantec Antivirus program. This flaw does not require
   any end user interaction for exploitation and can
   compromise affected systems, allowing for the execution
   of malicious code with SYSTEM level access.

Further tests revealed that Symantec Antivirus 10.x and Symantec Client
Security 3.x are vulnerable, but the current security suite is not. Other
Symantec products have not been checked.

eEye techs rate the severity of the flaw as High, due to the way it enables a
remote attacker to penetrate and execute code on a vulnerable system.

This is not the first time Symantec's anti-virus products have rendered systems
more vulnerable to attack, rather than less. Since January 2006 alone, the
National Vulnerability Database has logged several stumbles:

 - Symantec Gateway Security: The HTTP proxy in Symantec Gateway
Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is
being used, allows remote attackers to determine internal IP addresses by using
certain HTTP requests. [CVE-2006-2341]

 - Symantec Scan Engine: Symantec Scan Engine 5.0.0.24, and possibly
other versions before 5.1.0.7, stores sensitive log and virus definition files
under the web root with insufficient access control, which allows remote
attackers to obtain the information via direct requests. [CVE-2006-0232]

 - In addition, it uses the same private DSA key for each installation,
which allows remote attackers to conduct man-in-the-middle attacks and decrypt
communications. [CVE-2006-0231]

 - As if that's not bad enough, this version of Symantec Scan Engine
uses a client-side check to verify a password, which allows remote attackers to
gain administrator privileges via a modified client that sends certain XML
requests. [CVE-2006-0230]

 - Symantec LiveUpdate for Macintosh: Untrusted search path
vulnerability in unspecified components in Symantec LiveUpdate for Macintosh
3.0.0 through 3.5.0 do not set the execution path, which allows local users to
gain privileges via a Trojan horse program. [CVE-2006-1836]

 - Symantec Norton SystemWorks and Norton SystemWorks Premier: Symantec
Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary
copies of files in the Norton Protected Recycle Bin NProtect directory, which
is hidden from the FindFirst and FindNext Windows APIs and allows remote
attackers to hide arbitrary files from virus scanners and other products.
[CVE-2006-0166]  This was the much heralded rootkit-like [
http://www.sysinternals.com/blog/2006/01/rootkits-in-commercial-software.html
] cloaking that, once the spotlight hit, Symantec quickly discontinued.


All in all, eEye's Head Hacker, Marc Maiffret, apparently isn't too impressed
with Symantec's programming.As he told Dark Reading's Mike Fratto, "Finding
exploitable bugs in security software is bad enough, but finding generic
problems like stack-based buffer overflow indicates systemic issues. Using
secure development practices is costly for small developers, but a
billion-dollar company like Symantec can afford it."

Meanwhile, Microsoft and Intel are rapidly building a suite of products and
services that will erode user enthusiasm for third-party antivirus solutions.
At the same time, more network managers and ISPs are looking to funnel all WAN
traffic through antivirus-armoured network gateways.

Will Symantec find its footing in this rapidly deteriorating environment? So
far, it looks like a substantial portion of the stock market is betting against
them, as the company's stock price has dropped a third since May 2005.
(McAfee's performance isn't setting the world on fire, either.)

fyi: At this writing, Zacks average brokerage recommendation for both Symantec
and McAfee is Hold.
===

 /m

--- BBBS/NT v4.01 Flag-5
 * Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)