Alison:

Thanks for agreeing to test the installer.

Answers in-line below:

Alison Pechenick wrote:
> Greg, two questions:
>
> 1.  How do we know if ours is managed or unmanaged?  I can't remember 
> which version I installed.
The installer will convert an existing client from one mode to the 
other.  The only difference between "managed" and "unmanaged" clients 
are some registry settings that are thrown at installation time.

To verity your current mode, go to start -> all programs -> symantec 
client security -> symantec antivirus.  Look in the "general 
information" area that appears in the right-hand pane of the Symantec AV 
console.  If a "parent server" is listed, you have a managed client.
>
> I use my tablet from my office and from home; it's been automatically 
> updating the virus defs while I'm teaching online from home this 
> summer (i.e., haven't had the PC on campus or VPN recently).
Both managed and unmanaged clients will get updates.  The difference is 
how:  Managed clients get updates pushed to them from an on-campus 
management server as they become available.  "Pull" update is still 
available as a fallback.  Unmanaged clients use the pull mechanism only.
>
>
> 2.  I'm running version 10.0.2.2001.  The latest in the archive is .2020.
Just to clarify, neither of the versions you list is the version being 
tested.  The current build we are testing is 10.1.0.401, and it is 
available only via the link contained in my original message.
>
> Is this installer both patch and upgrade?  Should I upgrade first? 
> Uninstall first?
The linked file is a full product installer.  It will run a clean 
install on an "empty" system, and it should also work as an upgrade over 
SAV 8.1x or later.  However, I have only tested it when installing over 
other 10.x builds.

-Greg
>
>
> Thanks,
>
> Alison
>
>
> J. Greg Mackinnon wrote:
>> A patched installer for Symantec AntiVirus has been built and is 
>> ready for testing:
>> Managed version:
>> https://www.uvm.edu/software/distribution/windows/antivirus/sav10_1_0_401-managed.exe 
>>
>> Unmanaged version (for systems that are rarely/never on campus):
>> https://www.uvm.edu/software/distribution/windows/antivirus/sav10_1_0_401-unman.exe 
>>
>>
>> This build fixes a recently discovered remote code execution 
>> vulnerability in the Symantec Antivirus 10.x family of products.  
>> Details on the vulnerability are available here:
>> http://www.symantec.com/avcenter/security/Content/2006.05.25.html
>>
>> As this is a fairly serious vulnerability, distribution of this 
>> patched product is important.  Your assistance in the testing this 
>> build will help to ensure a smooth rollout.
>>
>> Please be aware that SAV 9.x clients do not contain this 
>> vulnerability.  However, SAV 9.x users still are encouraged to 
>> upgrade.  SAV 9.x does not protect against the same range of threats 
>> as does SAV 10.x.
>> Also note that SAV 8.x and earlier are end-of-life products.  These 
>> versions offer less-than-adequate protection against current 
>> threats.  An upgrade to SAV 10 is strongly advised.
>>
>> -Greg Mackinnon
>> x68251
>