Symantec AntiVirus Security Exploit SYM06-010
All Penn State users of the Symantec AntiVirus Corporate Edition
10 client software (hereafter referred to as SAVCE) obtained from
downloads.its.psu.edu or installed from the PAC-ITS CD should "patch"
their software to prevent exposure to a recently discovered security
exploit in the SAVCE code.
NOTE: Using LiveUpdate to update the antivirus file definitions
will NOT fix the problem. Users must install a specific "fix"
or "patch" as described below to protect against the potential
exploit.
BACKGROUND
Over time, ITS has distributed two "levels" of SAVCE
10. They are SAVCE 10.0.1.1000 and SAVCE 10.0.2.2001.In order to
successfully "patch" their systems, users must know exactly
which version they are running. To find this information, users
should open the SAVCE program, and look under Program Versions.
Once the version has been identified, users should follow the instructions
below to "patch" their systems.
FIXES
SAVCE 10.0.2.2001
Users running Symantec Antivirus Corporate Edition 10.0.2.2001
should download and install the SAVCE_10.0.2.2002_Frm_2001_AllWin_EN.zip
file (2MB) from https://downloads.its.psu.edu/.
SAVCE 10.0.1.1000
Users running Symantec Antivirus Corporate Edition 10.0.1.1000
should first upgrade to SAVCE
10.0.2.2001. This version can be obtained either by downloading
it (30MB) from https://downloads.its.psu.edu/
or installing from the PAC-ITS Version 8.1 CD. Then, once upgraded
to SAVCE 10.0.2.2001, users should follow patching instructions
for that version.
The ITS staff is aware of various other "patch" scenarios
documented on the Symantec website. Some of these are not applicable
to PSU's situation and could confuse many users. We therefore recommend
PSU users follow the instructions provided above as the easiest
method for "patching" SAVCE.
Questions about this information or difficulties encountered attempting
to update SAVCE may be directed to either the Help Desk in Willard
Building (814-863-1035) or to the Help Desk in the Computer Building
(814-863-2494) or email helpdesk@psu.edu.
|
