Description
Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.
References
- 3413 vdb-entry
- 20011005 Symantec LiveUpdate attacks mailing-list
- http://www.sarc.com/avcenter/security/Content/2001.10.05.html
- liveupdate-host-verification(7235) vdb-entry