Symantec Antivirus 10.0.x & 10.1.x

FNAL Critical Vulnerability
Platform: Windows system
Product: Symantec Antivirus 10.0.x & 10.1.x
Exploitation: Elevation of Privilege
Patch URL: see advisory below
Patch By: ACTIVE WORM - PATCH ASAP!!!!!

There is an active worm exploiting a hole in the Symantec antivirus client. All Symantec AV clients systems must be patched ASAP. FNAL is instituting a temporary border router block for the tcp/2967 port, but that will not protect against the VPN and walk-in infection vectors.
Please see the following URL for more information from Symantec:
http://www.symantec.com/avcenter/security/Content/2006.05.25.html
 

For assistance contact helpdesk@fnal.gov.
Information compiled and maintained by Computer Security Team ; last modified by JK on Jan 12, 2007.
(Address comments about page to the Computer Security Team.)