PT-2005-2530 · Sophos · Sophos Anti-Virus

David Balazic + 1 · Publicado 2005-05-14 · Atualizado 2017-07-11 · CVE-2005-1551

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus version 3.93

Description The issue allows remote attackers to bypass virus protection due to a race condition. This occurs when downloaded files are not checked for viruses if they have only been written, and the file is executed before the antivirus starts on system reboot.

Recommendations For Sophos Anti-Virus version 3.93, consider updating to a newer version that addresses this issue, as the current version does not properly check downloaded files for viruses, creating a potential security risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-1551

Produtos afetados

Sophos Anti-Virus

Referências · 3

• http://marc.info/?l=bugtraq&m=111566827411376&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1551 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20519 · Nota