Orange Business Services
Vigil@nce Vigil@nce Vigil@nce
we track for your security since 1999
 home presentation vulnerabilities documentation contact  
subscriber area subscriber area
free access free access
Vigil@nce team describes computer vulnerabilities impacting your systems, and offers solutions to correct them.
recent vulnerabilities recent vulnerabilities
tracked products tracked products
RSS feed RSS feed
vulnerability

vulnerability note 8794

F-PROT Antivirus: bypassing via TAR

Synthesis of the vulnerability

An attacker can create a TAR archive containing a virus which is not detected by F-PROT products.
Severity: 2/4.
Creation date: 15/06/2009.

Description of the vulnerability

F-PROT products detect viruses contained in TAR archives.

However, an attacker can create a slightly malformed archive, which can still be opened by Winzip tools, but which cannot be opened by the antivirus.

An attacker can therefore create a TAR archive containing a virus which is not detected by F-PROT products.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: F-PROT Antivirus: bypassing via TAR.
Keywords: -PROT Antivirus F-PROT TAR Winzip bypassing.
Identifiers: BID-35355, TZO-33-2009, VIGILANCE-VUL-8794.

Information sources

Publications and announces

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Computer applications vulnerability



















France Télécom Copyright 1999-2010 Vigil@nce. Vigil@nce is a service from Orange Business Services. Site map. Legal notice. Version française