PT-2006-7015 · Bitdefender · Bitdefender Mail Protection For Smb

Hendrik Weimer · Published 2006-12-10 · Updated 2018-10-17 · CVE-2006-6405

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BitDefender Mail Protection for SMB version 2.0

Description The issue allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file. This can be demonstrated using the EICAR test file.

Recommendations For version 2.0, consider updating to a newer version that addresses this issue, or as a temporary workaround, restrict the processing of multipart/mixed MIME files with invalid base64 encoded content to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-6405

Affected Products

Bitdefender Mail Protection For Smb

References · 4

• 🔥 http://quantenblog.net/security/virus-scanner-bypass · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6405 · Security Note
• http://securityfocus.com/archive/1/453654/100/0/threaded · Note
• http://securityfocus.com/bid/21461 · Note