PT-2005-5345 · Sophos · Sophos Anti-Virus

Published 2005-12-31 · Updated 2018-09-27 · CVE-2005-4680

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus versions prior to 4.02 Sophos Anti-Virus versions 4.5.x through 4.5.8 Sophos Anti-Virus versions 4.6.x through 4.6.8 Sophos Anti-Virus versions 5.x through 5.1.3

Description The issue allows remote attackers to hide arbitrary files and data via crafted ARJ archives. This is possible because the ARJ archives are not properly scanned.

Recommendations For versions prior to 4.02, update to version 4.02 or later. For versions 4.5.x through 4.5.8, update to version 4.5.9 or later. For versions 4.6.x through 4.6.8, update to version 4.6.9 or later. For versions 5.x through 5.1.3, update to version 5.1.4 or later.

Fix

Related Identifiers

CVE-2005-4680

Affected Products

Sophos Anti-Virus

References · 4

• http://sophos.com/support/knowledgebase/article/3803.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4680 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24345 · Note
• http://vupen.com/english/advisories/2006/0347 · Note