Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Security App Flaws :: b06-5444.htm

Symantec products vuln



vulnerability in Symantec products
vulnerability in Symantec products



Critical vulnerability was discovered in Symantec Internet Security 2005, posible afected products: Symantec Personal Firewall 2005, Symantec Internet Security 2004, Symantec Personal Firewall 2004,  Symantec Personal Firewall 2003, Symantec Internet Security 2006, Symantec Personal Firewall 2006.

Defective program feature allows to establish remote connections undetected - thus creating a perfect exploit for trojans and hacker activities. Symantec products generally have a rule "Default outbound NetBIOS", allowing programs to establish direct IP connections on ports 137, 138, 139. Therefore, trojan programs can undetectably bypass Symantec firewall and connect on these ports to attacker's remote server. However, resolving IP from DNS will be detected by the firewall.

Solutions:
- Disable "Default outbound NetBIOS" rule
- Modify "Default outbound NetBIOS" rule and restrict connections only to LAN

--------------------------------------------------
DimichSoft Security Group
http://www.dimichsoft.com/security.html 


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH