Norton Security for Mac does not verify certificates

Norton Security installer Bug

Improper Certificate Validation:

     The Install Norton Security for Mac installer, versions prior to 7.6, fails to properly validate SSL certificates provided by HTTPS connections, which can allow an attacker to obtain a Man-in-Middle position.


Impact:

     An attacker with a Man-in-the-Middle position can spoof content retrieved using HTTPS.


Solution:

 Symantec has released an updated installer, version 7.6 to address the vulnerability.