Two bugs found in Symantec products

ITEMS OF Symantec security software appear to have flaws which will actually allow a denial-of-service attack.

The remotely-exploitable flaws, spotted by security vender eEye, allow an anonymous attacker carry out the attack against systems running default installations of the affected software.

The products listed as affected were Norton Internet Security 2004, Norton Internet Security 2004 Professional and Norton Personal Firewall 2004.

The severity of both vulnerabilities has been rated high by eEye, who told the company about the vulnerability March 9.

eEye have refused to detail the vulnerability until the company had released a patch.

In another case, eEye said that it had found a vulnerability in all versions of ISS's RealSecure and BlackICE.

It said the remotely-exploitable flaw could let attackers gain the highest possible level of access. ISS was informed on March 8. µ