PT-2003-2394 · Aladdin Knowledge Systems · Esafe Gateway

Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1449

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Aladdin Knowledge Systems eSafe Gateway version 3.5.126.0

Description The issue allows remote attackers to bypass virus protection due to incomplete checking of the Content Vectoring Protocol (CVP) data stream.

Recommendations For version 3.5.126.0, consider updating to a newer version that includes a fix for this issue, as the current version does not properly check CVP data, allowing attackers to bypass virus protection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2003-1449

Produtos afetados

Esafe Gateway

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-1449 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11295 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2003-02/0088.html · Nota
• http://securityfocus.com/bid/6787 · Nota