CVE-2008-5747 F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that still allows the program to be executed. NOTE: due to an err...
MediumCVSS 5.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that still allows the program to be executed. NOTE: due to an error in the initial disclosure, F-secure was incorrectly stated as the vendor.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f-prot antivirus | = 4.6.8 | No fix listed |
References
- 34700 third-party-advisory
- GLSA-200904-14 vendor-advisory
- 4822 third-party-advisory
- www.ivizsecurity.com
- 20081210 [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass mailing-list
- 20081216 Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass mailing-list
- 20081222 Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass mailing-list
- 32753 vdb-entry