Hacker could gain privileged access to files
vnunet.com, 29 Aug 2005
Symantec has issued a patch for a security hole in its Corporate Edition 9.0 and Client Security 2.0 products.
The flaw was first reported by iDefense Labs and could allow a user to gain privileged access to files and functionalities on a local system through the software's help function.
The help software uses the same HTML format as for web pages. But the functionality is granted privileged access even if the user has only restricted rights.
By manipulating the user interface, a user could use those rights to browse all system files or execute applications.
Because the flaw cannot be exploited remotely, Symantec ranked its risk as 'medium'.
Licensed users of the affected products are advised to download the latest patch through the support website or update service.
Some firms forced to undust their old typewriters
Staff training is as vital to network security as the most cutting-edge patch or state-of-the-art email filter
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
We've finally cut the ribbon on V3.co.uk's inaugural Summit event...
Monitor, register and engage, says communications adviser Dirk Singer
In part one of our report, we talk to EMC...
Experts warn behavioural monitoring is essential to protect sensitive data
Do you agree?
Have your say on this article