GLSA-200410-31 : Archive::Zip: Virus detection evasion

The remote host is affected by the vulnerability described in GLSA-200410-31 Archive::Zip: Virus detection evasion Archive::Zip can be used by email scanning software like amavisd-new to uncompress attachments before virus scanning. By modifying the uncompressed size of archived files in the glob...

MoonLit Virus Backdoor Detection

The system is infected by the MoonLit virus, the backdoor port is open. Backdoor.Moonlit is a Trojan horse program that can download and execute files, and may act as a proxy server. Copyright C 2004-2010 KK Liu rev 1.0: MoonLit detection - 07/30/2004 rev 1.1: Description changes rev 1.2: Bug fix...

Archive::Zip: Virus detection evasion

Background Archive::Zip is a Perl module containing functions to handle ZIP archives. Description Archive::Zip can be used by email scanning software like amavisd-new to uncompress attachments before virus scanning. By modifying the uncompressed size of archived files in the global header of the...

iDEFENSE Security Advisory 10.18.04: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability

Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability iDEFENSE Security Advisory 10.18.04 www.idefense.com/application/poi/display?id=153&type=vulnerabilities October 18, 2004 I. BACKGROUND This vulnerability affects multiple anti-virus vendors including McAfee, Computer Associates,...

p5-Archive-Zip -- virus detection evasion

An AMaViS Security Announcement reports that a vulnerability exist in the Archive::Zip Perl module which may lead to bypass of malicious code in anti-virus programs by creating specially crafted ZIP files...

CVE-2004-0830

The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 and earlier, and F-Secure Internet Gatekeeper 6.32 and earlier allow remote attackers to cause a denial of service service crash due to unhandled exception vi...

CVE-2004-0830

The CVE-2004-0830 issue affects the Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange (versions 6.01/6.21 and earlier) and F-Secure Internet Gatekeeper 6.32 and earlier. It stems from an input validation/exception handling error when processing malformed packets sent to the Con...

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion source: https://www.securityfocus.com/bid/11236/info Sophos Anti-Virus is affected by a reserved MS-DOS name virus scan evasion vulnerability. This issue is due to a design error that allows certain files to avoid being scanned. An attacke...

Sophos Anti-Virus 3.x - Reserved MS-DOS Name Scan Evasion

source: https://www.securityfocus.com/bid/11236/info Sophos Anti-Virus is affected by a reserved MS-DOS name virus scan evasion vulnerability. This issue is due to a design error that allows certain files to avoid being scanned. An attacker may leverage this issue to bypass the scanner protection...

CVE-2004-0830

The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 and earlier, and F-Secure Internet Gatekeeper 6.32 and earlier allow remote attackers to cause a denial of service service crash due to unhandled exception vi...

Trojan/Backdoor - MyDOOM/NoVarg Detection

Binary data 1143.prm...

Trend Micro Virus Buster cgiWebupdate.exe Arbitrary File Access

Binary data 1627.prm...

Trojan/Backdoor - W32/Bagle Virus Detection

Binary data 1141.prm...

Avira Anti-Virus Multiple Scan Evasions

Binary data 5038.prm...

Avira Anti-Virus Zip File Scan Evasion

Binary data 5015.prm...

ESET Anti-Virus Bypass CAB Scanning

Binary data 5009.prm...

Avira Anti-Virus PDF File Scan Evasion

Binary data 5027.prm...

ripMIME -- decoding bug allowing content filter bypass

ripMIME may prematurely terminate decoding Base64 encoded messages when it encounters multiple blank lines or other non-standard Base64 constructs. Virus scanning and content filtering tools that use ripMIME may therefore be bypassed. The ripMIME CHANGELOG file says: There's viruses going around...

Norton AntiVirus Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ================================================ Norton AntiVirus Denial of Service Vulnerability ================================================ Norton AntiVirus Denial Of Service Vulnerability vulnerable ...only tested on! Symantec Norton...

Norton AntiVirus Denial of Service Vulnerability

No description provided by source. Norton AntiVirus Denial Of Service Vulnerability vulnerable ...only tested on! Symantec Norton AntiVirus 2003 Professional Edition Symantec Norton AntiVirus 2002 not vulnerable Mcafee 7 Mcafee 8 Risk Impact: Medium Remote: yes Description: While having a virus...