Visualizza versione completa : eEye Digital Security Discovers “Big Yellow”

16-12-2006, 16.43.14
A Non-Microsoft Internet Worm/Botnet Propagating via Symantec Anti-Virus Software

(ALISO VIEJO, CA) December 15, 2006 — eEye Digital Security®, a leading developer of network security and vulnerability management software solutions, as well as the industry’s foremost contributor to security research and education, today announced that it has discovered Big Yellow, a significant, non-Microsoft-based malware that has both worm and botnet characteristics and is currently propagating in the wild using Symantec’s popular anti-virus software. Big Yellow exploits a vulnerability in the remote management interface for versions of Symantec AntiVirus and Symantec Client Security, which could be remotely exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system, thus giving the attacker complete control...

Leggi: http://www.eeye.com/html/company/press/PR20061215.html

16-12-2006, 18.25.16
SAN FRANCISCO - A computer worm is attacking some business PCs through a flaw in antivirus software by Symantec Corp., a security company warned Friday. EEye Digital Security, based in Aliso Viejo, said the worm, dubbed "Big Yellow," began attacking some computer systems on Thursday - seven months after eEye first discovered the flaw...

Leggi: http://www.mercurynews.com/mld/mercurynews/business/technology/16250770.htm