Symantec admits security flaw

Saturday, January 14, 2006

Symantec, owner of the security software Norton SystemWorks admits the existence of a security flaw that can be exploited by malwares. The flaw is of the "rootkit" type.

A "rootkit" is a set of tools capable of concealing processes, files and other information preventing the detection of malwares such as virus, spywares and invasion programs.

In Norton, the "rootkit" works as the following: a folder named NProtect keeps all the files deleted by the user. It allows files to be undeleted. The problem is that Norton (as a "rootkit") hides the folder not only from the user but also from the operating system. It prevents antivirus and security tools from scanning the folder creating a hiding place for malwares. Symantec said that it was to "ensure that a user would not accidentally delete the files in the directory". They also claim to have no knowledge of any attempt to use this flaw and the problem can be easily solved by a normal software update.

Sources

"Norton outs its own 'rootkit'" — The National Business Review, January 11 2006

"Symantec comes clean on Norton rootkit" — PCpro, January 12 2006

"Symantec forced to fix rootkit-style flaw" — Techworld, January 12 2006

Share this:

This page is archived, and is no longer publicly editable.

Articles presented on Wikinews reflect the specific time at which they were written and published, and do not attempt to encompass events or knowledge which occur or become known after their publication.

Got a correction? Add the template {{editprotected}} to the talk page along with your corrections, and it will be brought to the attention of the administrators.

Please note that due to our archival policy, we will not alter or update the content of articles that are archived, but will only accept requests to make grammatical and formatting corrections.

Note that some listed sources or external links may no longer be available online due to age.

This page is archived, and is no longer publicly editable.

Articles presented on Wikinews reflect the specific time at which they were written and published, and do not attempt to encompass events or knowledge which occur or become known after their publication.

Got a correction? Add the template {{editprotected}} to the talk page along with your corrections, and it will be brought to the attention of the administrators.

Please note that due to our archival policy, we will not alter or update the content of articles that are archived, but will only accept requests to make grammatical and formatting corrections.

Note that some listed sources or external links may no longer be available online due to age.