Vulnerability Name:

CVE-2008-6903 (CCN-47255)

Assigned:2008-12-10
Published:2008-12-10
Updated:2009-08-19
Summary:Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, when CAB archive scanning is enabled, allows remote attackers to cause a denial of service (segmentation fault) via a "fuzzed" CAB archive file, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-399
Vulnerability Consequences:Denial of Service
References:Source: CCN
Type: BugTraq Mailing List, Wed Dec 10 2008 - 06:02:49 CST
[IVIZ-08-015] Sophos Antivirus for Linux vulnerability

Source: MITRE
Type: CNA
CVE-2008-6903

Source: BUGTRAQ
Type: UNKNOWN
20081210 [IVIZ-08-015] Sophos Antivirus for Linux vulnerability

Source: OSVDB
Type: UNKNOWN
50863

Source: CCN
Type: SA33177
Sophos Anti-Virus Products CAB Archive Processing Vulnerability

Source: SECUNIA
Type: Vendor Advisory
33177

Source: CCN
Type: SECTRACK ID: 1021476
Sophos Anti-Virus CAB Archive Processing Bug Lets Remote Users Deny Service

Source: CCN
Type: CERT-FI: 20469
CERT-FI and CPNI Joint Vulnerability Advisory on Archive Formats

Source: MISC
Type: UNKNOWN
http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html

Source: MISC
Type: Patch
http://www.ivizsecurity.com/security-advisory-iviz-sr-08015.html

Source: CCN
Type: OSVDB ID: 50863
Sophos Multiple Products Malformed CAB File Handling Application DoS

Source: BID
Type: UNKNOWN
32748

Source: CCN
Type: BID-32748
Sophos Antivirus Multiple File Processing Remote Denial Of Service Vulnerabilities

Source: SECTRACK
Type: Patch
1021476

Source: CCN
Type: Sophos Web site
Sophos

Source: CCN
Type: Sophos Knowledgebase Article ID: 50611
Advisory: Sophos Anti-Virus fuzzed CAB archive vulnerability reported

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.sophos.com/support/knowledgebase/article/50611.html

Source: VUPEN
Type: Vendor Advisory
ADV-2008-3458

Source: XF
Type: UNKNOWN
sophos-cab-files-dos(47255)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:sophos:anti-virus:4.7.18:*:windows-nt:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:4.7.18:*:windows_9x:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:4.9.18:*:os_x:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:4.37.0:*:netware:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:6.4.5:*:linux:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:7.0.5:*:unix:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus7.6.3:*:windows:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:sophos:anti-virus7.6.3::windows:*:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:4.7.18::windows-nt:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:4.7.18::windows_9x:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:4.9.18::os_x:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:6.4.5::linux:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:7.0.5::unix:*:*:*:*:*
  • OR cpe:/a:sophos:anti-virus:4.37.0::netware:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    sophos anti-virus 4.7.18
    sophos anti-virus 4.7.18
    sophos anti-virus 4.9.18
    sophos anti-virus 4.37.0
    sophos anti-virus 6.4.5
    sophos anti-virus 7.0.5
    sophos anti-virus7.6.3 * windows
    sophos anti-virus7.6.3 windows
    sophos anti-virus 4.7.18
    sophos anti-virus 4.7.18
    sophos anti-virus 4.9.18
    sophos anti-virus 6.4.5
    sophos anti-virus 7.0.5
    sophos anti-virus 4.37.0