Norton AntiVirus 2002 Nested File AutoProtect Bypass Vulnerability

Bugtraq ID:	9814
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Mar 06 2004 12:00AM
Updated:	Mar 06 2004 12:00AM
Credit:	Discovery of this issue is credited to Bipin Gautam <[email protected]>.
Vulnerable:	Symantec Norton AntiVirus 2002 Professional Edition Symantec Norton AntiVirus 2002 0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional
Not Vulnerable:

Norton AntiVirus 2002 Nested File AutoProtect Bypass Vulnerability

A vulnerability has been alleged in Norton AntiVirus 2002 that may potentially permit a nested executable file to bypass the AutoProtect feature when it is executed.

This issue was present in an early build of Norton AntiVirus 2002 but does not affect fully updated releases.

Norton AntiVirus 2002 Nested File AutoProtect Bypass Vulnerability

There is no exploit required.

Norton AntiVirus 2002 Nested File AutoProtect Bypass Vulnerability

Solution:
This issue is only present in an early build of the software. Fully updated releases of Norton AntiVirus 2002 will not exhibit this behavior. Users are advised to apply all available updates.

Norton AntiVirus 2002 Nested File AutoProtect Bypass Vulnerability

References:

• Norton AntiVirus Product Homepage (Symantec)
  
• Re: Norton Antivirus 2002 fails to scan files with ... [2'nd...UPDATED] (Bipin Gautam. )