PT-2003-2394 · Aladdin Knowledge Systems · Esafe Gateway

Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1449

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Aladdin Knowledge Systems eSafe Gateway version 3.5.126.0

Description The issue allows remote attackers to bypass virus protection due to incomplete checking of the Content Vectoring Protocol (CVP) data stream.

Recommendations For version 3.5.126.0, consider updating to a newer version that includes a fix for this issue, as the current version does not properly check CVP data, allowing attackers to bypass virus protection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2003-1449

Affected Products

Esafe Gateway

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-1449 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11295 · Note
• http://archives.neohapsis.com/archives/bugtraq/2003-02/0088.html · Note
• http://securityfocus.com/bid/6787 · Note