Vulnerability CVE-2008-6661

Vulnerability Name:

CVE-2008-6661 (CCN-47219)

Assigned:

2008-12-10

Published:

2008-12-10

Updated:

2017-08-17

Summary:

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed (1) NeoLite and (2) ASProtect packed PE file.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-189

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: BugTraq Mailing List, Wed Dec 10 2008 - 05:51:28 CST
[IVIZ-08-012] Bitdefender antivirus for Linux multiple vulnerabilities

Source: MITRE
Type: CNA
CVE-2008-6661

Source: BUGTRAQ
Type: UNKNOWN
20081210 [IVIZ-08-012] Bitdefender antivirus for Linux multiple vulnerabilities

Source: CCN
Type: SA33240
BitDefender Antivirus Scanner for Unices PE File Parsing Integer Overflows

Source: SECUNIA
Type: Vendor Advisory
33240

Source: CCN
Type: BitDefender Web site
BitDefender

Source: MISC
Type: UNKNOWN
http://www.ivizsecurity.com/security-advisory-iviz-sr-08012.html

Source: OSVDB
Type: UNKNOWN
50826

Source: CCN
Type: OSVDB ID: 50826
BitDefender Antivirus Scanner for Unices Crafted PE File Handling Multiple Overflows

Source: BID
Type: UNKNOWN
32751

Source: CCN
Type: BID-32751
BitDefender Antivirus For Linux Multiple File Processing Remote Denial Of Service Vulnerabilities

Source: VUPEN
Type: Vendor Advisory
ADV-2008-3459

Source: XF
Type: UNKNOWN
bitdefender-pe-overflow(47219)

Source: XF
Type: UNKNOWN
bitdefender-pe-overflow(47219)

Vulnerable Configuration:

Configuration 1:

cpe:/a:bitdefender:antivirus:*:*:*:*:*:*:*:* (Version <= 7.60825)

AND

cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:bitdefender:antivirus:7.60825:*:*:*:*:*:*:*

Denotes that component is vulnerable

BACK