Re: Symantec Client Firewall Denial of Service Vulnerability

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Art (smileart_at_spamyou.net)
Date: 04/22/04 

Date: Wed, 21 Apr 2004 22:00:08 -0700

Yet another reason, to skip Norton 2004 and use other programs.
  "PA Bear" <PABear@mvps.org> wrote in message news:e2clUp8JEHA.3404@TK2MSFTNGP10.phx.gbl...
  <quote>
  SYM04-007
  April 20, 2004
  Symantec Client Firewall Denial of Service Vulnerability
  [http://www.symantec.com/avcenter/security/Content/2004.04.20.html]
  Revision History
  None

  Risk Impact
  High

  Overview
  eEye Digital Security notified Symantec Corporation of a severe Denial of Service vulnerability they discovered in the Symantec Client Firewall products for Windows. By properly exploiting this issue, an attacker could render the targeted system inoperable.

  Affected Components
  Symantec Norton Internet Security and Professional 2003, 2004
  Symantec Norton Personal Firewall 2003, 2004
  Symantec Client Firewall 5.01, 5.1.1
  Symantec Client Security 1.0

  Details
  eEye Digital Security notified Symantec of a Denial of Service vulnerability they found during product testing against Symantec's client firewall applications. By directing a specifically formatted TCP attack against a target system running a vulnerable Symantec application, an attacker can cause a complete system halt. As a result, the targeted system would require a system reboot to clear the problem.

  Symantec Response
  Symantec confirmed the vulnerability reported by eEye Digital Security. Symantec product engineers have developed fixes for the issue and released patches for all impacted products through Symantec LiveUpdate and technical support channels.

  Clients using Symantec Norton Internet Security and Symantec Norton Personal Firewall who regularly run Symantec LiveUpdate should already be protected against this issue. However, to be sure they are fully protected, customers should run Symantec LiveUpdate manually to ensure all available updates are installed.

    a.. Open any installed Symantec product
    b.. Click on LiveUpdate in the toolbar
    c.. Run LiveUpdate until Symantec LiveUpdate indicated that all installed Symantec products are up-to-date
  Clients running Symantec Client Firewall or Symantec Client Security should download and apply patches obtained through their appropriate support channels.

  Symantec is not aware of any active attempts against or customer impact from this issue.

  Copyright (c) 2004 by Symantec Corp.
  </quote>
  --
  HTH - Please Reply to This Thread

  ~Robear Dyer (PA Bear)
  MS MVP-Windows (IE/OE), AH-VSOP

  AumHa Forums
  http://forum.mvps.org/

  Protect Your PC
   http://www.microsoft.com/security/protect

Relevant Pages