PT-2006-6352 · Sophos · Sophos Endpoint Security+2

Published 2006-11-01 · Updated 2018-10-17 · CVE-2006-5645

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Sophos Anti-Virus and Endpoint Security versions prior to 6.0.5 Sophos Anti-Virus for Linux versions prior to 5.0.10 Sophos other platforms versions prior to 4.11

Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by sending a malformed RAR archive. This archive has an Archive Header section where the head size and pack size fields are set to zero. The attack is possible when the "Enabled scanning of archives" option is set.

Recommendations: For Sophos Anti-Virus and Endpoint Security versions prior to 6.0.5, update to version 6.0.5 or later. For Sophos Anti-Virus for Linux versions prior to 5.0.10, update to version 5.0.10 or later. For Sophos other platforms versions prior to 4.11, update to version 4.11 or later. As a temporary workaround, consider disabling the "Enabled scanning of archives" option until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2006-5645

Affected Products

Sophos Anti-Virus

Sophos Anti-Virus For Linux

Sophos Endpoint Security

References · 10

• 🔥 https://exploit-db.com/exploits/2912 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5645 · Security Note
• http://secunia.com/advisories/22591 · Vendor Advisory
• http://vupen.com/english/advisories/2006/4239 · Vendor Advisory
• http://securityfocus.com/bid/20816 · Note
• http://securitytracker.com/id?1017132 · Note
• http://sophos.com/support/knowledgebase/article/7609.html · Note
• http://securityfocus.com/archive/1/474683/100/0/threaded · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439 · Note
• http://securitytracker.com/id?1018450 · Note