PT-2006-1410 · F Secure · F-Secure Internet Security+2

Publicado 2006-01-21 · Atualizado 2017-07-20 · CVE-2006-0338

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions F-Secure Anti-Virus for Windows Servers version 5.52 and earlier F-Secure Internet Security versions 2004, 2005, 2006 F-Secure Anti-Virus for Linux Servers version 4.64 and earlier

Description The issue allows remote attackers to hide arbitrary files and data by using malformed archives. Specifically, it affects the scanning of RAR and ZIP archives.

Recommendations For F-Secure Anti-Virus for Windows Servers version 5.52 and earlier, update to a version that properly scans RAR and ZIP archives. For F-Secure Internet Security versions 2004, 2005, 2006, update to a version that properly scans RAR and ZIP archives. For F-Secure Anti-Virus for Linux Servers version 4.64 and earlier, update to a version that properly scans RAR and ZIP archives.

Correção

Identificadores relacionados

CVE-2006-0338

Produtos afetados

F-Secure Anti-Virus For Linux Servers

F-Secure Anti-Virus For Windows Servers

F-Secure Internet Security

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2006-0338 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24199 · Nota
• http://osvdb.org/22633 · Nota
• http://vupen.com/english/advisories/2006/0257 · Nota
• http://securitytracker.com/id?1015507 · Nota
• http://f-secure.com/security/fsc-2006-1.shtml · Correção
• http://securitytracker.com/id?1015510 · Nota
• http://securitytracker.com/id?1015509 · Nota
• http://ciac.org/ciac/bulletins/q-103.shtml · Nota
• http://securitytracker.com/id?1015508 · Nota
• http://securityfocus.com/bid/16309 · Correção
• http://secunia.com/advisories/18529 · Aviso do Fabricante