PT-2005-3640 · Symantec · Symantec Antivirus Scan Engine

Infamous41Md · Published 2005-10-05 · Updated 2017-07-11 · CVE-2005-2758

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec AntiVirus Scan Engine versions 4.0 through 4.3

Description The issue is related to an integer signedness error in the administrative interface, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending crafted HTTP headers with negative values, leading to a heap-based buffer overflow.

Recommendations For Symantec AntiVirus Scan Engine versions 4.0 through 4.3, consider restricting access to the administrative interface until a fix is available. As a temporary workaround, avoid using the administrative interface for remote connections to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2758

Affected Products

Symantec Antivirus Scan Engine

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2005-2758 · Security Note
• http://idefense.com/application/poi/display?id=314&type=vulnerabilities · Vendor Advisory
• http://symantec.com/avcenter/security/Content/2005.10.04.html · Vendor Advisory
• http://secunia.com/advisories/17049 · Note
• http://vupen.com/english/advisories/2005/1954 · Note
• http://securitytracker.com/id?1015001 · Note
• http://securityreason.com/securityalert/48 · Note
• http://securityfocus.com/bid/15001 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22519 · Note
• http://kb.cert.org/vuls/id/849209 · Note
• http://osvdb.org/19854 · Note