Description
Symantec On-Demand Agent (SODA) before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection (SODP) before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an unspecified decryption method.
References
- 1016619 vdb-entry
- 19248 vdb-entry
- 20060801 SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure mailing-list
- symantec-ondemand-weak-encryption(28181) vdb-entry
- http://www.symantec.com/avcenter/security/Content/2006.08.01a.html
- ADV-2006-3097 vdb-entry
- 21280 third-party-advisory