|
Multiple Vendor Antivirus Software Zip Files Detection Evasion Vulnerability
Solution: Various vendors have released updates and corrected this issue. Other vendors are reported to release fixes in the near future. Please see references and contact the vendor for more information. Gentoo Linux has released an advisory (GLSA 200410-31) that fixes the Archive-Zip package and apparently resolves this issue. Gentoo Linux advises that all Archive::Zip users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=dev-perl/Archive-Zip-1.14" For more information please see the referenced Gentoo Linux advisory. Mandrake Linux has released an advisory (MDKSA-2004:118) dealing with this issue in their perls Archive::Zip package. Please see the referenced advisory for more information. SuSE Linux has released a fixed version of perls Archive::Zip module to resolve this issue. Computer Associates eTrust Secure Content Manager 1.0
Computer Associates eTrust Secure Content Manager 1.0 SP1
Computer Associates eTrust Secure Content Manager 1.1
Archive::Zip Archive::Zip 1.13
Computer Associates eTrust Intrusion Detection 1.4.1 .13
Computer Associates eTrust Intrusion Detection 1.4.5
Computer Associates eTrust Intrusion Detection 1.5
MandrakeSoft Linux Mandrake 10.1
MandrakeSoft Linux Mandrake 10.1 x86_64
Computer Associates eTrust EZ Armor 2.0
Computer Associates eTrust EZ Armor 2.3
Computer Associates eTrust EZ Armor 2.4
McAfee Antivirus Engine 4.3.20
Computer Associates InoculateIT 6.0
Computer Associates eTrust EZ Antivirus 6.1
Computer Associates eTrust EZ Antivirus 6.2
Computer Associates eTrust EZ Antivirus 6.3
Computer Associates eTrust Antivirus for the Gateway 7.0
Computer Associates eTrust Antivirus 7.0
Computer Associates eTrust Antivirus 7.1
Computer Associates eTrust Antivirus for the Gateway 7.1
|
|
 Privacy Statement |
