But no exploit yet

Oct 6, 2005 11:56 GMT  ·  By

After Kaspersky Lab admitted that there is a flaw in its Windows products, which can be exploited by hackers, it seems that is Symantec's turn to face such a problem.

The iDefense company, a division of VeriSign, has discovered a flaw in Symantec's AntiVirus Scan Engine and the one to be blamed is the web administering interface. By exploiting this flaw, a hacker would gain unauthorized access to the systems which are protected by this application.

Symantec has announced this flaw in a security advisory, and it was rated as "High". So far, there isn't any exploit to take advantage of the vulnerability, but Symantec urges its clients to apply the latest available patches.

Aside from this measure, Symantec recommends its clients to make sure that the web administering interface is available only through a secure connection. The security advisory also contains, aside from the complete list of vulnerable products, instructions regarding the way in which the web administration interface has to be configured, in order to prevent unauthorized access.

Symantec's announcement, which comes only two days after Kasperky Lab had the same problem, has proved that security products have become more and more interesting for hackers and that in the nearby future we should also expect some exploits for them.