Enterprise Security Manager has its vulnerability patched

19th April 2007

Symantec has announced on Tuesday the removal of critical vulnerability in Enterprise Security Manager. This vulnerability allowed a violator to execute remotely arbitrary code. All versions of the programme have the vulnerability. Symantec advises to install the new version, 6.5.3, including through autoupdate. According to company`s representative, no exploit or attack has been detected yet. The Enterprise Security Manager can detect and report the vulnerabilities and discrepancies in security policy, such as the attempts of passwords fitting or the need to install updates. On the heart of vulnerability lies the lack of user authentication, which makes a request for remote update. This means that hackers can "update" the program by trojan. The program operates in a system as administrator, InformationWeek reported.

Cheetah DVD Burner 2.06: easy program for disc recording