Lucene search

[email protected]CVE-2006-5645

HistoryNov 01, 2006 - 3:07 p.m.

CVE-2006-5645

2006-11-0115:07:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2006-5645

sophos

endpoint security

denial of service

rar

archive vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.186 Low

EPSS

Percentile

96.2%

JSON

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when “Enabled scanning of archives” is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.

Affected configurations

NVD

Node

sophosanti-virusMatch4.04

sophosanti-virusMatch4.05

sophosanti-virusMatch4.5.3

sophosanti-virusMatch4.5.4

sophosanti-virusMatch4.5.11

sophosanti-virusMatch4.5.12

sophosanti-virusMatch4.7.1

sophosanti-virusMatch4.7.2

sophosanti-virusMatch5.0.1

sophosanti-virusMatch5.0.2

sophosanti-virusMatch5.0.4

sophosanti-virusMatch5.1

sophosanti-virusMatch5.2

sophosanti-virusMatch5.2.1

sophosanti-virusMatch6.0.4

sophosendpoint_securityRange≤6.04

CPENameOperatorVersion
sophos:anti-virussophos anti-viruseq4.04
sophos:anti-virussophos anti-viruseq4.05
sophos:anti-virussophos anti-viruseq4.5.3
sophos:anti-virussophos anti-viruseq4.5.4
sophos:anti-virussophos anti-viruseq4.5.11
sophos:anti-virussophos anti-viruseq4.5.12
sophos:anti-virussophos anti-viruseq4.7.1
sophos:anti-virussophos anti-viruseq4.7.2
sophos:anti-virussophos anti-viruseq5.0.1
sophos:anti-virussophos anti-viruseq5.0.2

CPE	Name	Operator	Version
sophos:anti-virus	sophos anti-virus	eq	4.04
sophos:anti-virus	sophos anti-virus	eq	4.05
sophos:anti-virus	sophos anti-virus	eq	4.5.3
sophos:anti-virus	sophos anti-virus	eq	4.5.4
sophos:anti-virus	sophos anti-virus	eq	4.5.11
sophos:anti-virus	sophos anti-virus	eq	4.5.12
sophos:anti-virus	sophos anti-virus	eq	4.7.1
sophos:anti-virus	sophos anti-virus	eq	4.7.2
sophos:anti-virus	sophos anti-virus	eq	5.0.1
sophos:anti-virus	sophos anti-virus	eq	5.0.2

Rows per page:

1-10 of 161

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=439

secunia.com/advisories/22591

securitytracker.com/id?1017132

www.securityfocus.com/archive/1/474683/100/0/threaded

www.securityfocus.com/bid/20816

www.securitytracker.com/id?1018450

www.sophos.com/support/knowledgebase/article/7609.html

www.vupen.com/english/advisories/2006/4239

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.186 Low

EPSS

Percentile

96.2%

JSON

Related for CVE-2006-5645

cvelist1 nvd2 securityvulns3 prion1 cve1