Norton AntiVirus for Macintosh 10.0.2 was Released

An update to NAV 10.0.2 from Symantec is available via the LiveUpdate feature in the application. The changes in version 10.0.2 are:

• New security enhancements for the following components:

• SmallScanner
• DiskMountNotify

• Update to Auto-Protect.

The security enhancement is a medium risk described as:

The DiskMountNotify component of Symantec Norton AntiVirus for Macintosh does not set its execution path environment. A non-privileged user can change their execution path environment. If the user then executes the DiskMountNotify component, it will inherit the changed environment and use it to locate system commands. The DiskMountNotify is configured to run with System Administrative privileges (SUID) and is vulnerable to a potential Trojan horse attack.

[Dana Baggett]