Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Norton AntiVirus 2002 Virus Detection Bypass Issue

Mar 10, 2004 5:12AM PST

CRITICAL:
Less critical

IMPACT:
Security Bypass

WHERE:
Local system

SOFTWARE:
Norton AntiVirus 2002

DESCRIPTION:
Bipin Gautam has reported a security issue in Norton AntiVirus 2002,
which may result in malware being executed undetected.

An error in the Auto-Protect engine reportedly allows malware to be
executed undetected on a system under some circumstances. This can be
exploited by placing a malicious file in a nested sub-folder.

A bug was also reported, which may crash the front-end ("NAVW32.exe")
when performing a manual scan of a file or folder with a name
containing an ASCII control character. This doesn't affect the
Auto-Protect engine.

SOLUTION:
Grant only trusted users access to affected systems.

PROVIDED AND/OR DISCOVERED BY:
Bipin Gautam

http://secunia.com/advisories/11046/

Discussion is locked