SAV9 Functionality Hole - misses virus files

March 15, 2005


SecurityFocus HOME Mailing List: BugTraq: SAV9 Functionality Hole - misses virus files: "When SAV9 is protecting the file server, and an unprotected client saves files to
a share on the server, the files are not scanned. When another unprotected client opens these files, they are not scanned by the server. The server will only find these files during a scheduled scan."

"The API that Symantec is using is not on file open from the file system, but rather file open by the local desktop - this allows files to be saved and opened without being scanned."