To ease the process of updating Symantec clients due to the
recently
released vulnerability in Symantec AntiVirus, Symantec has
released a
tool that will update the vulnerable components of the
product (the
Decomposer) without the need to perform a full version
upgrade. The tool
is an executable files that runs completely silently (other
than a brief
stop and restart of Symantec AntiVirus) and can be deployed
as a logon
script or through other automated methods. You can confirm
that the
update was successful by checking file modification times
for the files
in the directory C:Program FilesCommon FilesSymantec
SharedDecomposers. There will be no incrementation of the
software or
AV engine version numbers when using the tool.
System and Network Security still recommends performing the
full version
upgrade, but system administrators who require additional
time and
testing may wish to use this tool as a stopgap measure. More
information
and a link to the tool is available at:
http://service1.symantec.com/SUPPORT
/ent-security.nsf/docid/2007071111591448
Please note that the tool will NOT update SAV9x/SCS3x; for
now this
software must be manually updated to the latest version to
protect
against this vulnerability.
--
Allison Henry
System and Network Security
University of California, Berkeley
http://security.berkeley
.edu
------------------------------------------------------------
------------
The following was automatically added to this message by the
list server:
To learn more about Micronet, including how to subscribe to
or unsubscribe from its mailing list and how to find out
about upcoming meetings, please visit the Micronet Web
site:
http://micronet.berkele
y.edu/
Messages you send to this mailing list are public and
world-viewable,
and the list's archives can be browsed and searched on the
Internet.
This means these messages can be viewed by (among others)
your bosses,
prospective employers, and people who have known you in the
past.
|
