Details of VAR-200612-0588

ID

VAR-200612-0588

CVE

CVE-2006-6409

TITLE

Linux Gateways of F-Secure Anti-Virus Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2006-001714

DESCRIPTION

F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file. Various security products are prone to a filter-bypass weakness. These products include: - BitDefender Mail Protection for SMB 2.0 - ClamAV 0.88.6 - F-prot AntiVirum for Linux x86 Mail Servers 4.6.6 - Kaspersky Anti-Virus for Linux Mail Server 5.5.10 Other applications and versions may also be affected. This issue occurs because the application fails to handle malformed input that may allow an attacker to bypass the file-filtering mechanism. There is a security bypass vulnerability in F-Secure Anti-Virus for Linux Gateways. Such as passing the EICAR test file

Trust: 1.98

sources: NVD: CVE-2006-6409 // JVNDB: JVNDB-2006-001714 // BID: 21461 // VULHUB: VHN-22517

AFFECTED PRODUCTS

vendor:	f secure	model:	f-secure anti-virus	scope:	eq	version:	4.65	Trust: 1.6
vendor:	f secure	model:	f-secure anti-virus	scope:	eq	version:	linux gateways 4.65	Trust: 0.8
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	9	Trust: 0.3
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	10	Trust: 0.3
vendor:	suse	model:	linux	scope:	eq	version:	9.3	Trust: 0.3
vendor:	s u s e	model:	linux	scope:	eq	version:	10.1	Trust: 0.3
vendor:	s u s e	model:	linux	scope:	eq	version:	10.0	Trust: 0.3
vendor:	novell	model:	open enterprise server	scope:	eq	version:	0	Trust: 0.3
vendor:	novell	model:	linux desktop	scope:	eq	version:	9	Trust: 0.3
vendor:	mandriva	model:	linux mandrake x86 64	scope:	eq	version:	2006.0	Trust: 0.3
vendor:	mandriva	model:	linux mandrake	scope:	eq	version:	2006.0	Trust: 0.3
vendor:	mandriva	model:	linux mandrake x86 64	scope:	eq	version:	2007.0	Trust: 0.3
vendor:	mandriva	model:	linux mandrake	scope:	eq	version:	2007.0	Trust: 0.3
vendor:	mandrakesoft	model:	corporate server x86 64	scope:	eq	version:	4.0	Trust: 0.3
vendor:	mandrakesoft	model:	corporate server x86 64	scope:	eq	version:	3.0	Trust: 0.3
vendor:	mandrakesoft	model:	corporate server	scope:	eq	version:	3.0	Trust: 0.3
vendor:	mandrakesoft	model:	corporate server	scope:	eq	version:	4.0	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	2.0.4	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	2.0.3	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	2.0.2	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	2.0.1	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	1.0.8	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	1.0.7	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	1.0.6	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	1.0.5	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	1.0.3	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	1.0.1	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	1.0-20040426	Trust: 0.3
vendor:	kolab	model:	groupware server	scope:	eq	version:	1.0	Trust: 0.3
vendor:	kolab	model:	groupware server 2.1beta2	scope:	-	version:	-	Trust: 0.3
vendor:	kolab	model:	groupware server 2.1.beta3	scope:	-	version:	-	Trust: 0.3
vendor:	kaspersky	model:	anti-virus	scope:	eq	version:	5.5.10	Trust: 0.3
vendor:	frisk	model:	software f-prot antivirus	scope:	eq	version:	4.6.6	Trust: 0.3
vendor:	debian	model:	linux sparc	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux s/390	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux ppc	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux mipsel	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux mips	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux m68k	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux ia-64	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux ia-32	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux hppa	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux arm	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux amd64	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux alpha	scope:	eq	version:	3.1	Trust: 0.3
vendor:	debian	model:	linux	scope:	eq	version:	3.1	Trust: 0.3
vendor:	clam	model:	anti-virus clamav	scope:	eq	version:	0.88.6	Trust: 0.3
vendor:	bitdefender	model:	mail protection for smb	scope:	eq	version:	2.0	Trust: 0.3

sources: BID: 21461 // JVNDB: JVNDB-2006-001714 // CNNVD: CNNVD-200612-173 // NVD: CVE-2006-6409

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2006-6409
value:	HIGH
Trust: 1.0
NVD:	CVE-2006-6409
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-200612-173
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-22517
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2006-6409
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-22517
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-22517 // JVNDB: JVNDB-2006-001714 // CNNVD: CNNVD-200612-173 // NVD: CVE-2006-6409

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2006-6409

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200612-173

TYPE

Design Error

Trust: 0.9

sources: BID: 21461 // CNNVD: CNNVD-200612-173

CONFIGURATIONS

sources: JVNDB: JVNDB-2006-001714

PATCH

title:

Top Page

url:

http://www.f-secure.com/

Trust: 0.8

sources: JVNDB: JVNDB-2006-001714

EXTERNAL IDS

db:	NVD	id:	CVE-2006-6409	Trust: 2.8
db:	BID	id:	21461	Trust: 2.0
db:	JVNDB	id:	JVNDB-2006-001714	Trust: 0.8
db:	CNNVD	id:	CNNVD-200612-173	Trust: 0.7
db:	BUGTRAQ	id:	20061206 MULTIPLE VENDOR UNUSUAL MIME ENCODING CONTENT FILTER BYPASS	Trust: 0.6
db:	VULHUB	id:	VHN-22517	Trust: 0.1

sources: VULHUB: VHN-22517 // BID: 21461 // JVNDB: JVNDB-2006-001714 // CNNVD: CNNVD-200612-173 // NVD: CVE-2006-6409

REFERENCES

url:	http://www.quantenblog.net/security/virus-scanner-bypass	Trust: 2.0
url:	http://www.securityfocus.com/bid/21461	Trust: 1.7
url:	http://www.securityfocus.com/archive/1/453654/100/0/threaded	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-6409	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-6409	Trust: 0.8
url:	http://www.securityfocus.com/archive/1/archive/1/453654/100/0/threaded	Trust: 0.6
url:	http://www.bitdefender.com	Trust: 0.3
url:	http://www.clamav.net/	Trust: 0.3
url:	http://www.f-prot.com/	Trust: 0.3
url:	http://www.kaspersky.com/	Trust: 0.3
url:	http://kolab.org/security/kolab-vendor-notice-14.txt	Trust: 0.3
url:	/archive/1/453654	Trust: 0.3

sources: VULHUB: VHN-22517 // BID: 21461 // JVNDB: JVNDB-2006-001714 // CNNVD: CNNVD-200612-173 // NVD: CVE-2006-6409

CREDITS

Hendrik Weimer is credited with the discovery of this vulnerability.

Trust: 0.9

sources: BID: 21461 // CNNVD: CNNVD-200612-173

SOURCES

db:	VULHUB	id:	VHN-22517
db:	BID	id:	21461
db:	JVNDB	id:	JVNDB-2006-001714
db:	CNNVD	id:	CNNVD-200612-173
db:	NVD	id:	CVE-2006-6409

LAST UPDATE DATE

2024-08-14T12:10:25.245000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-22517	date:	2018-10-17T00:00:00
db:	BID	id:	21461	date:	2016-07-06T14:40:00
db:	JVNDB	id:	JVNDB-2006-001714	date:	2012-06-26T00:00:00
db:	CNNVD	id:	CNNVD-200612-173	date:	2006-12-11T00:00:00
db:	NVD	id:	CVE-2006-6409	date:	2018-10-17T21:48:03.410

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-22517	date:	2006-12-10T00:00:00
db:	BID	id:	21461	date:	2006-12-06T00:00:00
db:	JVNDB	id:	JVNDB-2006-001714	date:	2012-06-26T00:00:00
db:	CNNVD	id:	CNNVD-200612-173	date:	2006-12-09T00:00:00
db:	NVD	id:	CVE-2006-6409	date:	2006-12-10T02:28:00