Symantec issues patch for backup-software flaw
38008
Vulnerabilities could allow attackers to gain remote control of a system, security company says.
433190
(InfoWorld) - With security vendors warning of new malware that exploits a recently patched flaw in Windows, Microsoft Corp. is saying that attacks are not on the rise. Earlier this week, two new malicious programs popped up, both of which took advantage of the MS06-040 Windows Server service vulnerability. This prompted Symantec Corp. to raise its ThreatCon rating to 2 on Thursday, an indication that users should be at a heightened level of security awareness. But on Friday Microsoft said that even with these new variants, the total number of computers being attacked was unchanged. "We're not seeing an increase in attacks, just minor variations," said Stephen Toulouse, security program manager with Microsoft's Security Response Center. Symantec's Oliver Friedrichs agreed that "the overall volume of attack attempts is fairly consistent," but he said that the fact that hackers had continued to pound away at the MS06-040 vulnerability is troubling. "The fact that we are seeing more threats exploiting these vulnerabilities, that in itself is disconcerting," said Friedrichs, a director of emerging technologies in Symantec Security Response. Symantec has counted six variants of the MS06-040 attacks to date. Symantec rates the two new programs spotted this week, W32.Dasher.G and W32.Spybot.AKNO, as low risks. AÂ security bulletin on MS06-040, which affects most versions of Windows, is available. The MS06-040 patch has to do with Windows' Server services, which are used for a variety of networking tasks, such as file sharing and printing. Because the flaw relates to widely used and network-enabled features, security experts have warned that it is a likely candidate for a widespread worm. Shortly after the patch was released, the U.S. Department of Homeland Security took the unusual step of warning users of the flaw, saying it could put the nation's infrastructure at risk. To date, however, no widespread outbreak has appeared.
505484
InfoWorld - Anti-virus firm Symantec warned today that exploit code is circulating for a known security hole in Computer Associates' BrightStor ARCServe Backup software, which provides data backup and restore for a variety of operating systems including Windows, Netware, Linux, Unix, and Mac.
607054
Symantec Corp.&#39;s Security Response service on Friday confirmed that unpatched Windows vulnerabilities could pose a serious risk for exploits via malicious Web pages and e-mail messages.
677548
Versions of Symantec Corp.&#039;s  anti-virus business security software contain a flaw that could  put millions of computers at risk of a crippling worm attack,  Internet experts warned on Friday.
124701
Millions of Chinese computers may have been paralysed by a faulty anti-virus update from Symantec, the world&#39;s largest security software provider, state media reported Thursday.
738911
InfoWorld - Symantec&#39;s attempt to make amends with Chinese users who saw their&#160;computers crippled by its antivirus software&#160;is off to a rocky start, with critics saying the company&#39;s&#160;compensation offer&#160;isn&#39;t good enough.
37589
Symantec Corp. is leaving open the possibility that it may compensate Chinese computer users whose systems were crippled by a flawed antivirus update last week.
414849
The giant has released a patch so that Windows doesn&#39;t let in hackers when it handles JPEG graphics formats. The flaw means that attackers can create an image file that will automatically run dodgy code, dump
643225
A team of analysts has successfully exploited a heap corruption vulnerability on a fully-patched Mac, and users running the Samba file- and printer-sharing application are advised to update the application manually.
216439
Acknowledging that its patching process has "not been an example of our best work," Microsoft this week issued a second update to security bulletin MS06-042, which was released in August. The original patch included a security vulnerability - and it turns out the fix introduced even more.
421234
TechWeb - The mlaware exploits a critical vulnerability in Symantec AntiVirus and Symantec Client Security, two of the vendor's business security products.
271561
Antivirus company Symantec is warning its customers about a number of critical holes in Microsoft&#39;s Windows operating system. The holes, which surfaced late last week, could make Windows systems vulnerable to compromise by remote attackers.
559585
(InfoWorld) - Symantec declared itsÂ compensation offerÂ for Chinese users who saw their computers damaged by a bad software update a success Sunday, but declined to say how many users had accepted the deal. Symantec ran into trouble May 18, when the company issued a faulty software update for its Norton antivirus software that wrongly identified two system files in the Simplified Chinese edition of Windows XP as malware, and quarantined them. That blunder rendered an estimated 50,000 Chinese PCs unusable, Symantec said. The incident also provoked an angry outcry from Chinese users, who demanded compensation for the damage wrought on their systems by Symantec. At least two users filed lawsuits against Symantec over damage done to their PCs by the company. Five weeks after the bad update was released, Symantec offered free software to those Chinese users who were affected. The company offered Chinese consumers a 12-month Norton license extension and a copy of Norton Save & Restore 2.0. Corporate customers were offered Symantec Ghost Solution Suite licenses, depending on the number of PCs affected. Symantec did not extend Norton licenses for corporate customers affected by the bad update. The compensation offer, which was valid for two and a half weeks starting from June 27, ended Sunday night. However, the Web site created for users to apply for compensation remained up at the time of writing, on Monday morning. In an e-mail statement sent Sunday, Symantec declared the offer a success, saying the gesture had been "well received." But the company did not offer any information to back up that claim. Symantec's offer was widely criticizedÂ in the Chinese press when it was first announced. "Symantec's response to its Chinese consumers lacks seriousness and sincerity," Alamus, the deputy director of the China Electronic Commerce Association's committee on legal and policy issues, said at that time in a report by China Central Television (CCTV), the country's national TV broadcaster. While Symantec's compensation offer officially ended Sunday, the company is keeping the door open for users who missed the July 15 deadline. "After this date anyone who missed the registration date should contact Symantec Customer Support or email symantec.authorised.support.cn@clts.com and we will give consideration to extending the date for that individual customer," the company said. Â
121334
Microsoft issued a patch for what it says is a &quot;critical&quot; security flaw in the way Windows programs handle JPEG images. According to a security bulletin accompanying the patch, the flaw
743592
Security company Symantec Corp. plans to announce the release of a patch management product on Monday that it says will enable small and medium-sized businesses (SMBs) to stay on top of software vulnerabilities.
400722
Unpalatable A Chinese user's attempt to sue Symantec for damage caused as a result of dodgy anti-virus signature update files is unlikely to succeed, according to security experts.â¦