National Cyber Awareness System

Vulnerability Summary for CVE-2008-5747

Overview

F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that still allows the program to be executed. NOTE: due to an error in the initial disclosure, F-secure was incorrectly stated as the vendor.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 32753

Hyperlink:http://www.securityfocus.com/bid/32753

External Source: BUGTRAQ

Name: 20081222 Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/499501/100/0/threaded

External Source: BUGTRAQ

Name: 20081216 Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/499305/100/0/threaded

External Source: BUGTRAQ

Name: 20081210 [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass

Hyperlink:http://www.securityfocus.com/archive/1/499083

External Source: MISC

Name: http://www.ivizsecurity.com/security-advisory-iviz-sr-08016.html

Hyperlink:http://www.ivizsecurity.com/security-advisory-iviz-sr-08016.html

External Source: SREASON

Name: 4822

Hyperlink:http://securityreason.com/securityalert/4822

External Source: GENTOO

Name: GLSA-200904-14

Hyperlink:http://security.gentoo.org/glsa/glsa-200904-14.xml

External Source: SECUNIA

Name: 34700

Hyperlink:http://secunia.com/advisories/34700