5

CVE-2004-2442

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F-secure ≫ F-secure Anti-virus Version 4.51 Edition linux_gateways
F-secure ≫ F-secure Anti-virus Version 4.51 Edition linux_servers
F-secure ≫ F-secure Anti-virus Version 4.51 Edition linux_workstations
F-secure ≫ F-secure Anti-virus Version 4.52 Edition linux_gateways
F-secure ≫ F-secure Anti-virus Version 4.52 Edition linux_servers
F-secure ≫ F-secure Anti-virus Version 4.52 Edition linux_workstations
F-secure ≫ F-secure Anti-virus Version 4.60 Edition samba_servers
F-secure ≫ F-secure Anti-virus Version 4.61 Edition linux_gateways
F-secure ≫ F-secure Anti-virus Version 4.61 Edition linux_servers
F-secure ≫ F-secure Anti-virus Version 5.0 Edition linux_client_security
F-secure ≫ F-secure Anti-virus Version 5.0 Edition linux_server_security
F-secure ≫ F-secure Anti-virus Version 5.5 Edition client_security
F-secure ≫ F-secure Anti-virus Version 5.5 Edition mimesweeper
F-secure ≫ F-secure Anti-virus Version 5.5 Edition windows_servers
F-secure ≫ F-secure Anti-virus Version 5.41 Edition mimesweeper
F-secure ≫ F-secure Anti-virus Version 5.41 Edition windows_servers
F-secure ≫ F-secure Anti-virus Version 5.41 Edition workstations
F-secure ≫ F-secure Anti-virus Version 5.42 Edition mimesweeper
F-secure ≫ F-secure Anti-virus Version 5.42 Edition windows_servers
F-secure ≫ F-secure Anti-virus Version 5.42 Edition workstations
F-secure ≫ F-secure Anti-virus Version 5.43 Edition workstations
F-secure ≫ F-secure Anti-virus Version 5.52 Edition client_security
F-secure ≫ F-secure Anti-virus Version 5.55 Edition client_security
F-secure ≫ F-secure Anti-virus Version 6.01 Edition ms_exchange
F-secure ≫ F-secure Anti-virus Version 6.2 Edition ms_exchange
F-secure ≫ F-secure Anti-virus Version 6.21 Edition ms_exchange
F-secure ≫ F-secure Anti-virus Version 6.30 Edition ms_exchange
F-secure ≫ F-secure Anti-virus Version 6.30_sr1 Edition ms_exchange
F-secure ≫ F-secure Anti-virus Version 6.31 Edition ms_exchange
F-secure ≫ F-secure Anti-virus Version 2004
F-secure ≫ F-secure Anti-virus Version 2005
F-secure ≫ F-secure For Firewalls Version 6.20
F-secure ≫ Internet Gatekeeper Version 2.6 Edition linux
F-secure ≫ Internet Gatekeeper Version 6.3
F-secure ≫ Internet Gatekeeper Version 6.4
F-secure ≫ Internet Gatekeeper Version 6.31
F-secure ≫ Internet Gatekeeper Version 6.32
F-secure ≫ Internet Gatekeeper Version 6.41
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.64% 0.952
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/13263/
Patch
http://www.ciac.org/ciac/bulletins/p-041.shtml
Vendor Advisory
http://www.f-secure.com/security/fsc-2004-3.shtml
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/968818
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/11732
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18217