PT-2006-1410 · F Secure · F-Secure Internet Security+2

Published 2006-01-21 · Updated 2017-07-20 · CVE-2006-0338

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions F-Secure Anti-Virus for Windows Servers version 5.52 and earlier F-Secure Internet Security versions 2004, 2005, 2006 F-Secure Anti-Virus for Linux Servers version 4.64 and earlier

Description The issue allows remote attackers to hide arbitrary files and data by using malformed archives. Specifically, it affects the scanning of RAR and ZIP archives.

Recommendations For F-Secure Anti-Virus for Windows Servers version 5.52 and earlier, update to a version that properly scans RAR and ZIP archives. For F-Secure Internet Security versions 2004, 2005, 2006, update to a version that properly scans RAR and ZIP archives. For F-Secure Anti-Virus for Linux Servers version 4.64 and earlier, update to a version that properly scans RAR and ZIP archives.

Fix

Related Identifiers

CVE-2006-0338

Affected Products

F-Secure Anti-Virus For Linux Servers

F-Secure Anti-Virus For Windows Servers

F-Secure Internet Security

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2006-0338 · Security Note
• http://f-secure.com/security/fsc-2006-1.shtml · Patch
• http://securityfocus.com/bid/16309 · Patch
• http://secunia.com/advisories/18529 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24199 · Note
• http://osvdb.org/22633 · Note
• http://vupen.com/english/advisories/2006/0257 · Note
• http://securitytracker.com/id?1015507 · Note
• http://securitytracker.com/id?1015510 · Note
• http://securitytracker.com/id?1015509 · Note
• http://ciac.org/ciac/bulletins/q-103.shtml · Note
• http://securitytracker.com/id?1015508 · Note