CVE Vulnerability

CVE-2008-5747

F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that still allows the program to be executed. NOTE: due to an error in the initial disclosure, F-secure was incorrectly stated as the vendor.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.ivizsecurity.com/security-advisory-iviz-sr-08016.html
http://www.securityfocus.com/archive/1/499083
http://www.securityfocus.com/bid/32753
http://securityreason.com/securityalert/4822
http://security.gentoo.org/glsa/glsa-200904-14.xml
http://secunia.com/advisories/34700
http://www.securityfocus.com/archive/1/499501/100/0/threaded
http://www.securityfocus.com/archive/1/499305/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:f-prot:f-prot_antivirus:4.6.8:*:linux:*:*:*:*:*
Information

Published : 2008-12-29 03:24

Updated : 2018-10-11 08:56

NVD link : CVE-2008-5747

Mitre link : CVE-2008-5747

Products Affected
No products.
CWE
CWE-399