NetSight
IP …
high7.5Public exploit code

CVE-2004-0932

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass anti…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Affected products

VendorProductAffected versions
Archive ZipArchive Zip
Version 1.13
BroadcomBrightstor Arcserve Backup
Version 11.1
BroadcomEtrust Antivirus
Versions 7.0, 7.1
BroadcomEtrust Antivirus Gateway
Versions 7.0, 7.1
BroadcomEtrust Ez Antivirus
Versions 6.1, 6.2, 6.3
BroadcomEtrust Ez Armor
Versions 2.0, 2.3, 2.4
BroadcomEtrust Intrusion Detection
Versions 1.4.1.13, 1.4.5, 1.5
BroadcomEtrust Secure Content Manager
Versions 1.0, 1.1
BroadcomInoculateit
Version 6.0
CaEtrust Antivirus
Version 7.0_sp2
CaEtrust Secure Content Manager
Version 1.0
Eset SoftwareNod32 Antivirus
Versions 1.0.11, 1.0.12, 1.0.13

References