CVE-2004-0936

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-0936
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
http://www.kb.cert.org/vuls/id/968818 US Government Resource
http://www.securityfocus.com/bid/11448 Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17761
http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
http://www.kb.cert.org/vuls/id/968818 US Government Resource
http://www.securityfocus.com/bid/11448 Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17761
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:archive_zip:archive_zip:1.13:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_antivirus:7.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_antivirus:7.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_antivirus_gateway:7.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_antivirus_gateway:7.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_ez_antivirus:6.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_ez_antivirus:6.2:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_ez_antivirus:6.3:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_ez_armor:2.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_ez_armor:2.3:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_ez_armor:2.4:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_intrusion_detection:1.4.1.13:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_intrusion_detection:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_intrusion_detection:1.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_secure_content_manager:1.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_secure_content_manager:1.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:*
cpe:2.3:a:ca:etrust_antivirus:7.0_sp2:*:*:*:*:*:*:*
cpe:2.3:a:ca:etrust_secure_content_manager:1.0:sp1:*:*:*:*:*:*
cpe:2.3:a:eset_software:nod32_antivirus:1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:eset_software:nod32_antivirus:1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:eset_software:nod32_antivirus:1.0.13:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:3.0:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:4.0:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:antivirus_engine:4.3.20:*:*:*:*:*:*:*
cpe:2.3:a:rav_antivirus:rav_antivirus_desktop:8.6:*:*:*:*:*:*:*
cpe:2.3:a:rav_antivirus:rav_antivirus_for_file_servers:1.0:*:*:*:*:*:*:*
cpe:2.3:a:rav_antivirus:rav_antivirus_for_mail_servers:8.4.2:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.4.6:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.78:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.78d:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.79:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.80:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.81:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.82:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.83:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.84:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.85:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_anti-virus:3.86:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_puremessage_anti-virus:4.6:*:*:*:*:*:*:*
cpe:2.3:a:sophos:sophos_small_business_suite:1.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*
History

20 Nov 2024, 23:49

Type Values Removed Values Added
References () http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true - () http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true -
References () http://www.kb.cert.org/vuls/id/968818 - US Government Resource () http://www.kb.cert.org/vuls/id/968818 - US Government Resource
References () http://www.securityfocus.com/bid/11448 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/11448 - Exploit, Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/17761 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/17761 -
Information

Published : 2005-01-27 05:00

Updated : 2024-11-20 23:49

NVD link : CVE-2004-0936

Mitre link : CVE-2004-0936

CVE.ORG link : CVE-2004-0936

JSON object : View

Products Affected

ca

  • etrust_secure_content_manager
  • etrust_antivirus

rav_antivirus

  • rav_antivirus_desktop
  • rav_antivirus_for_mail_servers
  • rav_antivirus_for_file_servers

broadcom

  • etrust_antivirus
  • etrust_ez_armor
  • etrust_antivirus_gateway
  • etrust_secure_content_manager
  • etrust_intrusion_detection
  • etrust_ez_antivirus
  • inoculateit
  • brightstor_arcserve_backup

sophos

  • sophos_anti-virus
  • sophos_puremessage_anti-virus
  • sophos_small_business_suite

suse

  • suse_linux

eset_software

  • nod32_antivirus

archive_zip

  • archive_zip

mcafee

  • antivirus_engine

gentoo

  • linux

kaspersky_lab

  • kaspersky_anti-virus

mandrakesoft

  • mandrake_linux
CWE
NVD-CWE-Other

NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024