|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200410-31] Archive::Zip: Virus detection evasion Vulnerability Scan
Vulnerability Scan Summary
Archive::Zip: Virus detection evasion
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200410-31
(Archive::Zip: Virus detection evasion)
Archive::Zip can be used by email scanning software (like amavisd-new) to
uncompress attachments before virus scanning. By modifying the uncompressed
size of archived files in the global header of the ZIP file, it is possible
to fool Archive::Zip into thinking some files inside the archive have zero
length.
Impact
A possible hacker could send a carefully crafted ZIP archive containing a virus
file and evade detection on some email virus-scanning software relying on
Archive::Zip for decompression.
Workaround
There is no known workaround at this time.
References:
http://www.idefense.com/application/poi/display?id=153
http://rt.cpan.org/NoAuth/Bug.html?id=8077
Solution:
All Archive::Zip users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-perl/Archive-Zip-1.14"
Threat Level: Low
Click HERE for more information and discussions on this network vulnerability scan.
|
