| Norton Antivirus with Novell Client Autoprotection Disabling Vulnerability |
|
Credit:
| First posted to Bugtraq by grice <grice@vt.edu> on July 28, 2000. |
|
Vulnerable:
|
Symantec Norton AntiVirus 5.0
Novell Client 3.1
|
|
Description:
|
"Auto-Protection" is a feature that comes with Norton Antivirus that automatically scans all files downloaded, executed, etc. It normally remains active from system bootup to shutdown regardless of who logs in and out of the system. Unfortunately, under Windows 95/98 with Novell Network Client installed, Norton Antivirus and its auto-protect service is disabled after the first user to log in logs out. This leaves the system vulnerable to attacks which the auto-protect software may have prevented. It is not known where exactly this flaw lies, within Novell Client or within Norton products as this behaviour is exhibited in systems running other Norton products under Novell Client.
|
| Exploit:
|
Currently SecuMania is not aware of any exploits for this issue.
If you are aware of more recent information, please mail us at: vul[at]SecuMania.org. |
|
Solution:
| Currently SecuMania is not aware of any solution for this issue.
If you are aware of more recent information, please mail us at: vul[at]SecuMania.org. |
|
References:
|
|