1. CVE-Search
  2. CVE-2005-3499
ID CVE-2005-3499
Summary Frisk F-Prot Antivirus allows remote attackers to bypass protection via a ZIP file with a version header greater than 15, which prevents F-Prot from decompressing and analyzing the file.
References
Vulnerable Configurations
  • cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:bsd:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:bsd:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:exchange:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:exchange:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:linux:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:linux:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:solaris:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:solaris:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:win:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:*:*:win:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:3.12b:*:linux:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:3.12b:*:linux:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:3.12d:*:bsd:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:3.12d:*:bsd:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:3.12d:*:linux:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:3.12d:*:linux:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:3.16c:*:*:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:3.16c:*:*:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:4.4.2:*:bsd:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:4.4.2:*:bsd:*:*:*:*:*
  • cpe:2.3:a:frisk_software:f-prot_antivirus:4.4.2:*:linux:*:*:*:*:*
    cpe:2.3:a:frisk_software:f-prot_antivirus:4.4.2:*:linux:*:*:*:*:*
CVSS
Base: 7.5 (as of 19-10-2018 - 15:36)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 15293
bugtraq
  • 20051103 [ TZO-012005 ] F-Prot/Frisk Anti Virus bypass - ZIP Version Header
  • 20090402 [TZO-07-2009] F-PROT ZIP Method evasion
fulldisc 20051102 [ TZO-012005 ] F-Prot/Frisk Anti Virus bypass - ZIP Version Header
misc
osvdb 20865
sectrack 1015148
xf fprotantivirus-zip-bypass-protection(22967)
Last major update 19-10-2018 - 15:36
Published 04-11-2005 - 00:02
Last modified 19-10-2018 - 15:36
Back to Top