Lucene search

K
cve[email protected]CVE-2005-3233
HistoryOct 14, 2005 - 10:02 a.m.

CVE-2005-3233

2005-10-1410:02:00
web.nvd.nist.gov
21
trustix antivirus
cve-2005-3233
interpretation error
virus detection
rar file
winrar
powerzip
winzip
bitzipper

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.2%

Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.

Affected configurations

NVD
Node
trustixantivirus
CPENameOperatorVersion
trustix:antivirustrustix antiviruseq*

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.2%

Related for CVE-2005-3233