PT-2005-3640 · Symantec · Symantec Antivirus Scan Engine

Infamous41Md · Publicado 2005-10-05 · Atualizado 2017-07-11 · CVE-2005-2758

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec AntiVirus Scan Engine versions 4.0 through 4.3

Description The issue is related to an integer signedness error in the administrative interface, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending crafted HTTP headers with negative values, leading to a heap-based buffer overflow.

Recommendations For Symantec AntiVirus Scan Engine versions 4.0 through 4.3, consider restricting access to the administrative interface until a fix is available. As a temporary workaround, avoid using the administrative interface for remote connections to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2758

Produtos afetados

Symantec Antivirus Scan Engine

Referências · 11

• http://secunia.com/advisories/17049 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2758 · Nota de Segurança
• http://idefense.com/application/poi/display?id=314&type=vulnerabilities · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/1954 · Nota
• http://securitytracker.com/id?1015001 · Nota
• http://securityreason.com/securityalert/48 · Nota
• http://securityfocus.com/bid/15001 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22519 · Nota
• http://kb.cert.org/vuls/id/849209 · Nota
• http://osvdb.org/19854 · Nota
• http://symantec.com/avcenter/security/Content/2005.10.04.html · Aviso do Fabricante