<A HREF="http://www.eweek.com/article2/0,1895,2112727,00.asp?kc=EWNAVEMNL041107EOAD">Symantec has patched a security hole</A> in its Enterprise Security Manager tool that allows attackers to take control of infected machines.

The company cautioned users in an advisory that all versions of ESM, except version 6.5.3, are vulnerable to a remote code execution attack. The problem, officials at the antivirus vendor reported, is that the ESM agent remote upgrade interface does not authenticate the source of remote upgrade requests--a vulnerability that can be exploited to launch malware via a specially crafted upgrade request.