Sophos Antivirus Multiple Denial of Service and Memory Corruption Vulnerabilities
BID:20816
Info
Sophos Antivirus Multiple Denial of Service and Memory Corruption Vulnerabilities
| Bugtraq ID: | 20816 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2006-4839 CVE-2006-5645 CVE-2006-5646 CVE-2006-5647 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 30 2006 12:00AM |
| Updated: | Jul 27 2007 12:45AM |
| Credit: | Damian Put <[email protected]>is credited with discovering these issues. Titon and an anonymous security researcher are also credited with discovering the RAR archive issue. |
| Vulnerable: |
Sophos Small Business Edition (Windows) 4.6.1 Sophos Small Business Edition (Linux) 4.6.1 Sophos Antivirus for Linux 4.03 Sophos Anti-Virus 5.2.1 Sophos Anti-Virus 5.2 Sophos Anti-Virus 5.0.4 Sophos Anti-Virus 5.0.2 Sophos Anti-Virus 5.0.1 Sophos Anti-Virus 4.7.2 Sophos Anti-Virus 4.7.1 Sophos Anti-Virus 4.5.12 Sophos Anti-Virus 4.5.11 Sophos Anti-Virus 4.5.4 Sophos Anti-Virus 4.5.3 Sophos Anti-Virus 5.1 Sophos Anti-Virus 4.05 Sophos Anti-Virus 4.04 Computer Associates Unicenter Network and Systems Management 3.1 Computer Associates Unicenter Network and Systems Management 3.0 Computer Associates Unicenter Network and Systems Management 3.1 Computer Associates Unicenter Network and Systems Management 3.0 Computer Associates Unicenter Network and Systems Management 11.1 Computer Associates Unicenter Network and Systems Management 11 Computer Associates Protection Suites r2 0 Computer Associates Protection Suites r3 Computer Associates Internet Security Suite 2007 3.0 Computer Associates eTrust Secure Content Manager 8.0 Computer Associates eTrust Secure Content Manager 1.0 Computer Associates eTrust Intrusion Detection 3.0 SP 1 Computer Associates eTrust Intrusion Detection 3.0 Computer Associates eTrust Intrusion Detection 2.0.0 SP1 Computer Associates eTrust Internet Security Suite R2 Computer Associates eTrust Internet Security Suite r1 Computer Associates eTrust EZ Armor 3.1 Computer Associates eTrust EZ Armor 3.0 Computer Associates eTrust EZ Armor 2.0 Computer Associates eTrust EZ Armor 1.0 Computer Associates eTrust Antivirus 7.1 Computer Associates eTrust Antivirus 7.0 Computer Associates eTrust Antivirus 6.1 Computer Associates eTrust Antivirus r8.1 Computer Associates eTrust Antivirus r8 Computer Associates Common Services r11.1 Computer Associates Common Services r11 Computer Associates BrightStor ARCServe Backup 11.1 Computer Associates BrightStor ARCServe Backup 11.5 Computer Associates BrightStor ARCServe Backup 10.5 Computer Associates ARCServe Client agent for Windows 0 Computer Associates Anti-Virus SDK 0 Computer Associates Anti-Virus Gateway 7.1 Computer Associates Anti-Virus for the Enterprise r8 Computer Associates Anti-Virus 2007 8 Computer Associates Anti-Spyware for the Enterprise r8.1 Computer Associates Anti-Spyware for the Enterprise r8 Computer Associates Anti-Spyware 2007 |
| Not Vulnerable: | |
Discussion
Sophos Antivirus Multiple Denial of Service and Memory Corruption Vulnerabilities
Sophos Antivirus is prone to multiple denial-of-service and memory corruption vulnerabilities.
A remote attacker may trigger these issues to deny service to legitimate users or execute arbitrary machine code in the context of the vulnerable application. This may result in a complete compromise of affected computers.
Sophos Antivirus is prone to multiple denial-of-service and memory corruption vulnerabilities.
A remote attacker may trigger these issues to deny service to legitimate users or execute arbitrary machine code in the context of the vulnerable application. This may result in a complete compromise of affected computers.
Exploit / POC
Sophos Antivirus Multiple Denial of Service and Memory Corruption Vulnerabilities
The following proof-of-concept exploits are available:
The following proof-of-concept exploits are available:
Solution / Fix
Sophos Antivirus Multiple Denial of Service and Memory Corruption Vulnerabilities
Solution:
The vendor released fixes to address these issues. Please see the references section for further information.
Computer Associates Unicenter Network and Systems Management 11
Computer Associates Anti-Virus Gateway 7.1
Computer Associates Common Services r11
Computer Associates Anti-Virus for the Enterprise r8
Computer Associates Common Services r11.1
Computer Associates eTrust Intrusion Detection 3.0 SP 1
Computer Associates eTrust Intrusion Detection 3.0
Computer Associates Unicenter Network and Systems Management 3.1
Computer Associates eTrust Antivirus 7.1
Computer Associates eTrust Secure Content Manager 8.0
Solution:
The vendor released fixes to address these issues. Please see the references section for further information.
Computer Associates Unicenter Network and Systems Management 11
-
Computer Associates QO89141
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO89 141
Computer Associates Anti-Virus Gateway 7.1
-
Computer Associates QO89381
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO89 381&startsearch=1
Computer Associates Common Services r11
-
Computer Associates QO89140
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO89 140
Computer Associates Anti-Virus for the Enterprise r8
-
Computer Associates QO86839
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO86 839
Computer Associates Common Services r11.1
-
Computer Associates QO89138
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO89 138&startsearch=1
Computer Associates eTrust Intrusion Detection 3.0 SP 1
-
Computer Associates QO86923
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO86 925&startsearch=1
Computer Associates eTrust Intrusion Detection 3.0
-
Computer Associates QO86925
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO86 925&startsearch=1
Computer Associates Unicenter Network and Systems Management 3.1
-
Computer Associates QO89139
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO89 139
Computer Associates eTrust Antivirus 7.1
-
Computer Associates QO86843
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO86 843
Computer Associates eTrust Secure Content Manager 8.0
-
Computer Associates QO87114
http://supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO87 114
References
Sophos Antivirus Multiple Denial of Service and Memory Corruption Vulnerabilities
References:
References:
- CA Arclib library RAR file denial of service vulnerability (Computer Associates)
- IDefense Security Advisory (iDefense Labs
) - Sophos Homepage (Sophos)
- [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilitie (Computer Associates)
- iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial o (iDefense Labs
) - iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memo (iDefense Labs
) - iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vul (iDefense Labs
) - Security Notice for CA products containing Arclib (Computer Associates)
- Vulnerabilities Reported by IDefense (Sophos)