Symantec acknowledged on Friday that a vulnerability in a corporate version of its antivirus software could expose server username and password information. The company said it is investigating the report.
The hole exists in Symantec AntiVirus Corporate Edition version 9. Either an attacker or regular user would be able to obtain the login information, says Symantec. In order to expose the sensitive data, a user would have to be running a LiveUpdate server.
Read the complete story. (BetaNews)