PT-2005-2530 · Sophos · Sophos Anti-Virus

David Balazic + 1 · Published 2005-05-14 · Updated 2017-07-11 · CVE-2005-1551

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus version 3.93

Description The issue allows remote attackers to bypass virus protection due to a race condition. This occurs when downloaded files are not checked for viruses if they have only been written, and the file is executed before the antivirus starts on system reboot.

Recommendations For Sophos Anti-Virus version 3.93, consider updating to a newer version that addresses this issue, as the current version does not properly check downloaded files for viruses, creating a potential security risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-1551

Affected Products

Sophos Anti-Virus

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-1551 · Security Note
• http://marc.info/?l=bugtraq&m=111566827411376&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20519 · Note