PT-2002-3106 · Trend Micro · Interscan Viruswall

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2394

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions InterScan VirusWall versions 3.6 for Linux and 3.52 for Windows

Description The issue allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.

Recommendations For InterScan VirusWall version 3.6 for Linux and 3.52 for Windows, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2002-2394

Affected Products

Interscan Viruswall

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-2394 · Security Note
• http://securityfocus.com/bid/5697 · Note
• http://iss.net/security_center/static/10106.php · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2394 · Note
• http://securityfocus.com/archive/1/291538 · Note