Details of VAR-200501-0309

ID

VAR-200501-0309

CVE

CVE-2004-0933

TITLE

Security hole

Trust: 0.6

sources: CNNVD: CNNVD-200501-311

DESCRIPTION

Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system. Multiple Vendor Antivirus applications are reported vulnerable to a zip file detection evasion vulnerability. This vulnerability may allow maliciously crafted zip files to avoid being scanned and detected. A remote attacker can craft a malicious zip archive and send it a vulnerable user. The malicious archive can bypass the protection provided by a vulnerable antivirus program, giving users a false sense of security. If the user opens and executes the file, this attack can result in a malicious code infection. This issue is reported to affected products offered by McAfee, Computer Associates, Kaspersky, Sophos, Eset and RAV. Latest antivirus products by Symantec, Bitdefender, Trend Micro and Panda are not vulnerable to this issue

Trust: 1.26

sources: NVD: CVE-2004-0933 // BID: 11448 // VULHUB: VHN-9363

AFFECTED PRODUCTS

vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.78d	Trust: 1.6
vendor:	sophos	model:	small business suite	scope:	eq	version:	1.0	Trust: 1.3
vendor:	sophos	model:	puremessage anti-virus	scope:	eq	version:	4.6	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.86	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.85	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.84	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.83	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.82	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.81	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.80	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.79	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.78	Trust: 1.3
vendor:	sophos	model:	anti-virus	scope:	eq	version:	3.4.6	Trust: 1.3
vendor:	mcafee	model:	antivirus engine	scope:	eq	version:	4.3.20	Trust: 1.3
vendor:	gentoo	model:	linux	scope:	eq	version:	1.4	Trust: 1.3
vendor:	suse	model:	linux	scope:	eq	version:	9.2	Trust: 1.0
vendor:	broadcom	model:	etrust antivirus gateway	scope:	eq	version:	7.1	Trust: 1.0
vendor:	rav antivirus	model:	desktop	scope:	eq	version:	8.6	Trust: 1.0
vendor:	broadcom	model:	etrust antivirus	scope:	eq	version:	7.1	Trust: 1.0
vendor:	broadcom	model:	etrust ez armor	scope:	eq	version:	2.3	Trust: 1.0
vendor:	kaspersky lab	model:	anti-virus	scope:	eq	version:	5.0	Trust: 1.0
vendor:	rav antivirus	model:	for file servers	scope:	eq	version:	1.0	Trust: 1.0
vendor:	kaspersky lab	model:	anti-virus	scope:	eq	version:	3.0	Trust: 1.0
vendor:	eset	model:	nod32 antivirus	scope:	eq	version:	1.0.12	Trust: 1.0
vendor:	broadcom	model:	etrust secure content manager	scope:	eq	version:	1.1	Trust: 1.0
vendor:	kaspersky lab	model:	anti-virus	scope:	eq	version:	4.0	Trust: 1.0
vendor:	mandrakesoft	model:	mandrake linux	scope:	eq	version:	10.1	Trust: 1.0
vendor:	eset	model:	nod32 antivirus	scope:	eq	version:	1.0.13	Trust: 1.0
vendor:	broadcom	model:	etrust ez antivirus	scope:	eq	version:	6.2	Trust: 1.0
vendor:	broadcom	model:	etrust antivirus gateway	scope:	eq	version:	7.0	Trust: 1.0
vendor:	rav antivirus	model:	for mail servers	scope:	eq	version:	8.4.2	Trust: 1.0
vendor:	broadcom	model:	etrust intrusion detection	scope:	eq	version:	1.4.1.13	Trust: 1.0
vendor:	broadcom	model:	etrust antivirus	scope:	eq	version:	7.0	Trust: 1.0
vendor:	broadcom	model:	etrust secure content manager	scope:	eq	version:	1.0	Trust: 1.0
vendor:	gentoo	model:	linux	scope:	eq	version:	*	Trust: 1.0
vendor:	broadcom	model:	etrust intrusion detection	scope:	eq	version:	1.5	Trust: 1.0
vendor:	broadcom	model:	etrust ez armor	scope:	eq	version:	2.4	Trust: 1.0
vendor:	eset	model:	nod32 antivirus	scope:	eq	version:	1.0.11	Trust: 1.0
vendor:	broadcom	model:	etrust ez antivirus	scope:	eq	version:	6.1	Trust: 1.0
vendor:	broadcom	model:	brightstor arcserve backup	scope:	eq	version:	11.1	Trust: 1.0
vendor:	broadcom	model:	inoculateit	scope:	eq	version:	6.0	Trust: 1.0
vendor:	broadcom	model:	etrust intrusion detection	scope:	eq	version:	1.4.5	Trust: 1.0
vendor:	broadcom	model:	etrust ez antivirus	scope:	eq	version:	6.3	Trust: 1.0
vendor:	broadcom	model:	etrust ez armor	scope:	eq	version:	2.0	Trust: 1.0
vendor:	ca	model:	etrust antivirus	scope:	eq	version:	7.0_sp2	Trust: 1.0
vendor:	ca	model:	etrust secure content manager	scope:	eq	version:	1.0	Trust: 1.0
vendor:	archive zip	model:	archive zip	scope:	eq	version:	1.13	Trust: 1.0
vendor:	sophos	model:	anti-virus d	scope:	eq	version:	3.78	Trust: 0.3
vendor:	s u s e	model:	linux personal	scope:	eq	version:	9.2	Trust: 0.3
vendor:	rav	model:	antivirus rav antivirus for mail servers	scope:	eq	version:	8.4.2	Trust: 0.3
vendor:	rav	model:	antivirus rav antivirus for file servers	scope:	eq	version:	1.0	Trust: 0.3
vendor:	rav	model:	antivirus rav antivirus desktop	scope:	eq	version:	8.6	Trust: 0.3
vendor:	mandriva	model:	linux mandrake x86 64	scope:	eq	version:	10.1	Trust: 0.3
vendor:	mandriva	model:	linux mandrake	scope:	eq	version:	10.1	Trust: 0.3
vendor:	kaspersky	model:	labs antivirus scanning engine	scope:	eq	version:	5.0	Trust: 0.3
vendor:	kaspersky	model:	labs antivirus scanning engine	scope:	eq	version:	4.0	Trust: 0.3
vendor:	kaspersky	model:	labs antivirus scanning engine	scope:	eq	version:	3.0	Trust: 0.3
vendor:	gentoo	model:	linux	scope:	-	version:	-	Trust: 0.3
vendor:	eset	model:	nod32 antivirus	scope:	eq	version:	1.013	Trust: 0.3
vendor:	eset	model:	nod32 antivirus	scope:	eq	version:	1.012	Trust: 0.3
vendor:	eset	model:	nod32 antivirus	scope:	eq	version:	1.011	Trust: 0.3
vendor:	computer	model:	associates inoculateit	scope:	eq	version:	6.0	Trust: 0.3
vendor:	computer	model:	associates etrust secure content manager	scope:	eq	version:	1.1	Trust: 0.3
vendor:	computer	model:	associates etrust secure content manager sp1	scope:	eq	version:	1.0	Trust: 0.3
vendor:	computer	model:	associates etrust secure content manager	scope:	eq	version:	1.0	Trust: 0.3
vendor:	computer	model:	associates etrust intrusion detection	scope:	eq	version:	1.5	Trust: 0.3
vendor:	computer	model:	associates etrust intrusion detection	scope:	eq	version:	1.4.5	Trust: 0.3
vendor:	computer	model:	associates etrust intrusion detection	scope:	eq	version:	1.4.1.13	Trust: 0.3
vendor:	computer	model:	associates etrust ez armor	scope:	eq	version:	2.4	Trust: 0.3
vendor:	computer	model:	associates etrust ez armor	scope:	eq	version:	2.3	Trust: 0.3
vendor:	computer	model:	associates etrust ez armor	scope:	eq	version:	2.0	Trust: 0.3
vendor:	computer	model:	associates etrust ez antivirus	scope:	eq	version:	6.3	Trust: 0.3
vendor:	computer	model:	associates etrust ez antivirus	scope:	eq	version:	6.2	Trust: 0.3
vendor:	computer	model:	associates etrust ez antivirus	scope:	eq	version:	6.1	Trust: 0.3
vendor:	computer	model:	associates etrust antivirus for the gateway	scope:	eq	version:	7.1	Trust: 0.3
vendor:	computer	model:	associates etrust antivirus for the gateway	scope:	eq	version:	7.0	Trust: 0.3
vendor:	computer	model:	associates etrust antivirus	scope:	eq	version:	7.1	Trust: 0.3
vendor:	computer	model:	associates etrust antivirus sp2	scope:	eq	version:	7.0	Trust: 0.3
vendor:	computer	model:	associates etrust antivirus	scope:	eq	version:	7.0	Trust: 0.3
vendor:	computer	model:	associates brightstor arcserve backup for windows	scope:	eq	version:	11.1	Trust: 0.3
vendor:	archive zip	model:	archive::zip	scope:	eq	version:	1.13	Trust: 0.3
vendor:	archive zip	model:	archive::zip	scope:	ne	version:	1.14	Trust: 0.3

sources: BID: 11448 // CNNVD: CNNVD-200501-311 // NVD: CVE-2004-0933

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2004-0933
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200501-311
value:	HIGH
Trust: 0.6
VULHUB:	VHN-9363
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2004-0933
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-9363
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-9363 // CNNVD: CNNVD-200501-311 // NVD: CVE-2004-0933

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-0933

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200501-311

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-200501-311

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-9363

PATCH

title:

Multiple antivirus software Security vulnerabilities

url:

http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=146860

Trust: 0.6

sources: CNNVD: CNNVD-200501-311

EXTERNAL IDS

db:	NVD	id:	CVE-2004-0933	Trust: 2.0
db:	BID	id:	11448	Trust: 2.0
db:	CNNVD	id:	CNNVD-200501-311	Trust: 0.7
db:	EXPLOIT-DB	id:	629	Trust: 0.1
db:	VULHUB	id:	VHN-9363	Trust: 0.1

sources: VULHUB: VHN-9363 // BID: 11448 // CNNVD: CNNVD-200501-311 // NVD: CVE-2004-0933

REFERENCES

url:	http://supportconnectw.ca.com/public/ca_common_docs/arclib_vuln.asp	Trust: 2.0
url:	http://www.securityfocus.com/bid/11448	Trust: 1.7
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/17761	Trust: 1.7
url:	http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true	Trust: 1.6
url:	http://download.mcafee.com/uk/updates/updates.asp	Trust: 0.3
url:	http://www.nod32.com/	Trust: 0.3
url:	http://www.kaspersky.com/	Trust: 0.3
url:	http://www.ravantivirus.com/	Trust: 0.3
url:	http://www.sophos.com/	Trust: 0.3
url:	/archive/1/378660	Trust: 0.3
url:	http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true	Trust: 0.1

sources: VULHUB: VHN-9363 // BID: 11448 // CNNVD: CNNVD-200501-311 // NVD: CVE-2004-0933

CREDITS

iDEFENSE Security Advisory※ labs@idefense.com

Trust: 0.6

sources: CNNVD: CNNVD-200501-311

SOURCES

db:	VULHUB	id:	VHN-9363
db:	BID	id:	11448
db:	CNNVD	id:	CNNVD-200501-311
db:	NVD	id:	CVE-2004-0933

LAST UPDATE DATE

2024-08-14T13:51:14.300000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-9363	date:	2017-07-11T00:00:00
db:	BID	id:	11448	date:	2009-07-12T08:06:00
db:	CNNVD	id:	CNNVD-200501-311	date:	2021-04-08T00:00:00
db:	NVD	id:	CVE-2004-0933	date:	2021-04-09T17:00:09.303

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-9363	date:	2005-01-27T00:00:00
db:	BID	id:	11448	date:	2004-10-18T00:00:00
db:	CNNVD	id:	CNNVD-200501-311	date:	2004-10-15T00:00:00
db:	NVD	id:	CVE-2004-0933	date:	2005-01-27T05:00:00