Update to Symantec vulnerability

From: Allison Henry <akhenry_at_berkeley.edu>
Date: Wed, 18 Jul 2007 16:14:58 -0700

To ease the process of updating Symantec clients due to the recently
released vulnerability in Symantec AntiVirus, Symantec has released a
tool that will update the vulnerable components of the product (the
Decomposer) without the need to perform a full version upgrade. The tool
is an executable files that runs completely silently (other than a brief
stop and restart of Symantec AntiVirus) and can be deployed as a logon
script or through other automated methods. You can confirm that the
update was successful by checking file modification times for the files
in the directory C:\Program Files\Common Files\Symantec
Shared\Decomposers. There will be no incrementation of the software or
AV engine version numbers when using the tool.

System and Network Security still recommends performing the full version
upgrade, but system administrators who require additional time and
testing may wish to use this tool as a stopgap measure. More information
and a link to the tool is available at:

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007071111591448

Please note that the tool will NOT update SAV9x/SCS3x; for now this
software must be manually updated to the latest version to protect
against this vulnerability.

-- 
Allison Henry
System and Network Security
University of California, Berkeley
http://security.berkeley.edu
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
To learn more about Micronet, including how to subscribe to
or unsubscribe from its mailing list and how to find out
about upcoming meetings, please visit the Micronet Web site:
http://micronet.berkeley.edu/
Messages you send to this mailing list are public and world-viewable,
and the list's archives can be browsed and searched on the Internet.
This means these messages can be viewed by (among others) your bosses,
prospective employers, and people who have known you in the past.
Received on Wed Jul 18 2007 - 16:28:15 PDT

This archive was generated by hypermail 2.2.0 : Wed Jul 18 2007 - 16:28:17 PDT