PT-2005-5345 · Sophos · Sophos Anti-Virus

Publicado 2005-12-31 · Atualizado 2018-09-27 · CVE-2005-4680

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus versions prior to 4.02 Sophos Anti-Virus versions 4.5.x through 4.5.8 Sophos Anti-Virus versions 4.6.x through 4.6.8 Sophos Anti-Virus versions 5.x through 5.1.3

Description The issue allows remote attackers to hide arbitrary files and data via crafted ARJ archives. This is possible because the ARJ archives are not properly scanned.

Recommendations For versions prior to 4.02, update to version 4.02 or later. For versions 4.5.x through 4.5.8, update to version 4.5.9 or later. For versions 4.6.x through 4.6.8, update to version 4.6.9 or later. For versions 5.x through 5.1.3, update to version 5.1.4 or later.

Correção

Identificadores relacionados

CVE-2005-4680

Produtos afetados

Sophos Anti-Virus

Referências · 4

• http://sophos.com/support/knowledgebase/article/3803.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24345 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4680 · Nota de Segurança
• http://vupen.com/english/advisories/2006/0347 · Nota