Symantec fixes Norton vulnerability

Symantec has released an update for Norton SystemWorks after admitting to using a rootkit-type feature in the software package that could provide cyber-criminals a perfect hiding place for malicious code.

The anti-virus vendor has acknowledged it was deliberately hiding a directory from Windows APIs to stop users from deleting files accidentally, but security experts warned this could provide a location for an attacker to hide a malicious file on a computer.

Although Symantec says it is not aware of any attempts by hackers to conceal malicious code in the hidden folder, the company had decided to release an update to eliminate the possibility. The Norton update, which is available through the Symantec LiveUpdate service, will display the previously hidden directory in the Windows interface, allowing it to be scanned by anti-virus products.

Symantec is the second commercial company to receive warnings over the use of rootkit-type techniques to hide files on computers.

Sony BMG faced criticism after anti-rootkit scanners identified the use of stealthy rootkit-type techniques to hide its anti-piracy software. Sony was forced to stop using the technique and recall thousands of CDs after hackers used the software as a hiding place for Trojans.

Data networking equipment maker 3Com has announced that CEO Bruce Claflin will retire when a new CEO is named, reports Reuters.

3Com says Claflin is involved in the search for a new CEO being run by a committee of independent directors of the company`s board.

Claflin was appointed as 3Com CEO in September 2000. Before joining 3Com, he served as senior VP and GM for sales and marketing for Digital Equipment Corporation and held several senior positions at IBM, where he worked for 22 years.

The US Patent Office is working with open source developers to improve the way patents are applied to software, reports The Register.

The publication says the Patent Office plans to provide an open patent review section on its Web site so interested parties can search for patent applications in certain areas, or register to get an alert when someone files for a relevant patent.

The Patent Office says the move comes in response to concerns from the software community about the patent system. It is aimed at involving the open source community to provide resources that are key to examining software-related applications.