Worms Worms Worms...

New worm attacks through Symantec antivirus application.
The software vulnerability through which the Big Yellow worm is able to penetrate Windows PCs was patched by Symantec in May 2006. But according to eEye Digital Security, many IT departments have not yet rolled out the fix, leaving these computers vulnerable to attack. A new worm is making the rounds, attacking some business computers through a known __ and
already patched __ flaw in a popular antivirus software suite from security firm Symantec. The worm, called "Big Yellow" and discovered initially by eEye Digital Security, zaps vulnerable computers with malicious code and turns them into remote_controlled zombie machines. Big Yellow exploits a vulnerability in the remote_management interface for Symantec AntiVirus and Symantec Client Security software packages. Marc Maiffret, eEye's founder and CTO, said that the threat appears to be widespread.
Source:http://www.newsfactor.com/story.xhtml?story_id=102003ILKSHI