PT-2005-4169 · Arcavir · Arcavir

Andrey Bayora · Publicado 2005-10-29 · Atualizado 2016-10-18 · CVE-2005-3370

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ArcaVir 2005 package 2005-06-21

Description The issue allows remote attackers to bypass virus scanning by using a file with an "MZ" magic byte sequence, which is normally associated with EXE files, but can be used in files such as BAT, HTML, and EML. This causes the file to be treated as a safe type, even though it could still be executed as a dangerous file type by applications on the end system.

Recommendations For ArcaVir 2005 package 2005-06-21, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2005-3370

Produtos afetados

Arcavir

Referências · 6

• http://securityelf.org/magicbyteadv.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=113026417802703&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3370 · Nota de Segurança
• http://securityfocus.com/bid/15189 · Nota
• http://securityelf.org/magicbyte.html · Nota
• http://securityelf.org/updmagic.html · Nota