F-PROT Antivirus for Linux ELF File Scanning Denial of Service Vulnerability
BID:32753
Info
F-PROT Antivirus for Linux ELF File Scanning Denial of Service Vulnerability
| Bugtraq ID: | 32753 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2008-5747 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 10 2008 12:00AM |
| Updated: | Apr 29 2009 04:26PM |
| Credit: | Jonathan Brossard from iViZ Techno Solutions |
| Vulnerable: |
Gentoo Linux Frisk Software F-Prot Antivirus for Linux Workstation 4.6.8 Frisk Software F-Prot Antivirus for Linux and BSD 4.4.2 |
| Not Vulnerable: | |
Discussion
F-PROT Antivirus for Linux ELF File Scanning Denial of Service Vulnerability
F-PROT Antivirus for Linux is a virus scanning application for the Linux operating system.
The application is prone to a denial-of-service vulnerability because it fails to handle malformed files.
Successfully exploits will crash the affected application, resulting in a denial-of-service condition. Given the nature of this issue, code execution may be possible, but this has not been confirmed.
F-PROT Antivirus for Linux 4.6.8 is vulnerable; other versions may also be affected.
F-PROT Antivirus for Linux is a virus scanning application for the Linux operating system.
The application is prone to a denial-of-service vulnerability because it fails to handle malformed files.
Successfully exploits will crash the affected application, resulting in a denial-of-service condition. Given the nature of this issue, code execution may be possible, but this has not been confirmed.
F-PROT Antivirus for Linux 4.6.8 is vulnerable; other versions may also be affected.
Exploit / POC
F-PROT Antivirus for Linux ELF File Scanning Denial of Service Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
F-PROT Antivirus for Linux ELF File Scanning Denial of Service Vulnerability
Solution:
NOTE: The vendor reports that the issue described affects a version of F-PROT that is no longer supported. The vendor recommends that customers upgrade to the current version, which is not vulnerable to this issue.
Solution:
NOTE: The vendor reports that the issue described affects a version of F-PROT that is no longer supported. The vendor recommends that customers upgrade to the current version, which is not vulnerable to this issue.
References
F-PROT Antivirus for Linux ELF File Scanning Denial of Service Vulnerability
References:
References:
- F-prot Product Page (Frisk Software)
- Re: [Full-disclosure] [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupte (Toni Koivunen)
- [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security ("iViZ Security Advisories"
- Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Secur ([email protected])
- Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Secur ([email protected])
- Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Secur ([email protected])
- Security Advisory: F-Prot Antivirus for Linux corrupted ELF header Security Bypa (iVIZ)