Symantec UPX Parsing Engine Heap Overflow

[Neil Watson <bugtraq () watson-wilson ca>]

There is an article about a vulnerability in Symantec's NAV and other
products:
http://securityresponse.symantec.com/avcenter/security/Content/2005.02.08.html

The details are somewhat lacking on what specifically needs to be
updated.  We are running several NAV servers from 7.5 to 8.1 and I can't
tell whether or not I need to patch or if LiveUpdate is taking care of
this.  There are mixed comments (as always) on Slashdot:
http://it.slashdot.org/article.pl?sid=05/02/10/1327220&tid=172

Does anyone have information or experiences to share?

--
Neil Watson               | Gentoo Linux
Network Administrator     | Uptime 28 days
http://watson-wilson.ca   | 2.6.10 AMD Athlon(tm) MP 2000+ x 2