PT-2006-7019 · F Secure · F-Secure Anti-Virus For Linux Gateways

Hendrik Weimer · Published 2006-12-10 · Updated 2018-10-17 · CVE-2006-6409

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions F-Secure Anti-Virus for Linux Gateways version 4.65

Description The issue allows remote attackers to cause a denial of service, possibly resulting in a fatal scan error, and may also enable them to bypass virus detection. This can be achieved by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file. An example of this exploit is demonstrated using the EICAR test file.

Recommendations For F-Secure Anti-Virus for Linux Gateways version 4.65, consider updating to a newer version that addresses this issue, as the current version may allow attackers to bypass virus detection and cause a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-6409

Affected Products

F-Secure Anti-Virus For Linux Gateways

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-6409 · Security Note
• http://quantenblog.net/security/virus-scanner-bypass · Note
• http://securityfocus.com/archive/1/453654/100/0/threaded · Note
• http://securityfocus.com/bid/21461 · Note