Description
F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that still allows the program to be executed. NOTE: due to an error in the initial disclosure, F-secure was incorrectly stated as the vendor.
References
- 20081210 [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass mailing-list
- 20081222 Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass mailing-list
- 32753 vdb-entry
- GLSA-200904-14 vendor-advisory
- 34700 third-party-advisory
- http://www.ivizsecurity.com/security-advisory-iviz-sr-08016.html
- 4822 third-party-advisory
- 20081216 Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass mailing-list