Kaspersky Endpoint security 10/11 and directory junction exploit

[Darrkon]

Hi,

Recently we have seen websites reporting that ‘most’ antivirus products can be rendered inoperable using directory junctions in Windows. This was published by Rack911 labs within the last few weeks.

Is this something Kaspersky Endpoint Security is susceptible to? Is there a patch or workaround available and if so, what version should we be running?

Thanks

[ultra_seyed]

Hello

 

i do not see subject

 

can you explain more ?

[Oleg Bykov]

Hello,

I can only show this topic in the Russian part of the forum:

https://community.kaspersky.com/produkty-kaspersky-dlya-biznesa-31/informirovanie-ob-uyazvimostyah-v-antivirusnyh-resheniyah-8475

Basically it says that KES is affected by that but if you have Kaspersky Endpoint Security 11.1 or newer, then the fix is already there, you don’t have to worry.

Maybe there is something more official but I can’t find it right now.