Vulnerability 62759 - CERT Civis.Net

Vulnerability Name:

CCN-62759

Published:

2010-10-25

Updated:

2010-10-25

Summary:

Multiple vendors could allow a local attacker to bypass security restrictions, caused by a vulnerability in the file parsing engine. By sending a specially-crafted file containing an overly long path, a remote attacker could exploit this vulnerability to bypass scanning detection and possibly launch further attacks on the vulnerable system.

CVSS v3 Severity:

4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N)
1.7 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Consequences:

Bypass Security

References:

Source: CCN
Type: F-Secure Web site
F-Secure

Source: CCN
Type: Hispasec Sistemas
Wiindows LongPatths:: exttended--llengtth patth

Source: CCN
Type: Quick Heal Technologies Web site
Quick Heal Products

Source: CCN
Type: BID-44374
Multiple Antivirus Vendors Overly Long Path Length Local Scanner Bypass Vulnerability

Source: CCN
Type: Symantec Web site
Symantec Norton AntiVirus

Source: XF
Type: UNKNOWN
multiple-path-security-bypass(62759)

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:f-secure:anti-virus:-:*:*:*:*:*:*:*

OR cpe:/a:symantec:norton_antivirus:*:*:*:*:*:*:*:*

OR cpe:/a:comodo:comodo_antivirus:2.0:*:*:*:*:*:*:*

OR cpe:/a:trendmicro:trend_micro_antivirus:9.120.0.1004:*:*:*:*:*:*:*

OR cpe:/a:sophos:anti-virus:4.37.0::netware:*:*:*:*:*

Denotes that component is vulnerable

BACK