Unscored CVE-2006-6408 EUVD-2006-6391GHSA-5hgh-p589-mcv4

Kaspersky Anti-Virus for Linux Mail Servers 5.5.10 allows remote attackers to bypass virus detection by inserting invalid characters into b…

Published Dec 10, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Kaspersky Anti-Virus for Linux Mail Servers 5.5.10 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.

References

21461 vdb-entry
20061206 Multiple Vendor Unusual MIME Encoding Content Filter Bypass mailing-list
http://www.quantenblog.net/security/virus-scanner-bypass