Lucene search

[email protected]CVE-2006-6409

HistoryDec 10, 2006 - 2:28 a.m.

CVE-2006-6409

2006-12-1002:28:00

[email protected]

web.nvd.nist.gov

f-secure

anti-virus

linux

gateways

dos

cve-2006-6409

eicar test file

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.9%

JSON

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.

Affected configurations

NVD

Node

f-securef-secure_anti-virusMatch4.65linux_gateways

CPENameOperatorVersion
f-secure:f-secure_anti-virusf-secure f-secure anti-viruseq4.65

CPE	Name	Operator	Version
f-secure:f-secure_anti-virus	f-secure f-secure anti-virus	eq	4.65

References

www.quantenblog.net/security/virus-scanner-bypass

www.securityfocus.com/archive/1/453654/100/0/threaded

www.securityfocus.com/bid/21461

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.9%

JSON

Related for CVE-2006-6409

cvelist1 nvd1