Feeds

Y2.01K bug trips up Symantec

Schoolboy error causes red faces

Internet Security Threat Report 2014

Symantec's Endpoint Protection Manager has been hit by a classic date bug and fell over at the end of the year, accepting no definition updates dated since then.

Symantec have issued a statement, which states that: "An issue has been identified in the Symantec Endpoint Protection Manager (SEPM) server whereby all types of SEP definition content [AV/AS, IPS] with a date greater than December 31, 2009 11:59pm are considered to be 'out of date'."

Until the bug is fixed, Symantec has a bandaid strategy: "Symantec Response will continue to publish Symantec Endpoint Protection antivirus and other definitions with the date 12/31/2009, and will only increase the revision number of the definition. More specifically the last certified definitions that was published on December 31, 2009 was “12/31/2009 rev. 041” version. The next certified definitions to be published will have a revision number greater than 041."

Symantec assures customers that: "there are no changes that a customer administrator needs to apply in order for the above mitigation to be successful."

Also, "the SEPM Dashboard by default will not display that the definitions are out of date. The default for this setting is “10” days... If SEPM Notification for “out of date definitions” has been enabled then it is possible that the prescribed threshold has exceeded and a notification may be triggered."

Symentec's SEPM product team is developing a proper fix for the problem and burning the midnight oil to get it out as fast as possible.

El Reg thanks our contact who said this incident: "Reminds me of your recent article about cheap and dirty Y2K bug fixes where some unscrupulous programmers put in a simple if <10 = 20xx otherwise the date is 19xx." Indeed. ®

Internet Security Threat Report 2014

More from The Register

next story
Webcam hacker pervs in MASS HOME INVASION
You thought you were all alone? Nope – change your password, says ICO
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
Meet OneRNG: a fully-open entropy generator for a paranoid age
Kiwis to seek random investors for crowd-funded randomiser
USB coding anarchy: Consider all sticks licked
Thumb drive design ruled by almighty buck
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
Attack reveals 81 percent of Tor users but admins call for calm
Cisco Netflow a handy tool for cheapskate attackers
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.