OSVDB ID: 10509 Title: Multiple Anti-Virus MS-DOS Device Name Scan Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
Norton AntiVirus contains a flaw that may allow malicious files to bypass scanning. The issue is triggered when malware uses a MS-DOS Device based name such as AUX, CON, PRN, COM1 and LPT1. It is possible that the flaw may allow malware to evade scans resulting in a loss of integrity. |
Classification |
Location:
Local Access Required
Attack Type: Other Impact: Unknown Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Symantec has released a patch to address this vulnerability available via LiveUpdate. Furthermore, it is possible to correct the flaw by implementing the following workaround: 1.) Ensure that no local files or directories using reserved MS-DOS device names exist 2.) Use 'del \.\C:\aux' to delete those files if they exist (e.g. aux) |
Products |
|
References |
|
Credit |
|
seifried.org -