NetSight
IP …
high7.5Public exploit code

CVE-2004-0933

Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eT…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Affected products

VendorProductAffected versions
Archive ZipArchive Zip
Version 1.13
BroadcomBrightstor Arcserve Backup
Version 11.1
BroadcomEtrust Antivirus
Versions 7.0, 7.1
BroadcomEtrust Antivirus Gateway
Versions 7.0, 7.1
BroadcomEtrust Ez Antivirus
Versions 6.1, 6.2, 6.3
BroadcomEtrust Ez Armor
Versions 2.0, 2.3, 2.4
BroadcomEtrust Intrusion Detection
Versions 1.4.1.13, 1.4.5, 1.5
BroadcomEtrust Secure Content Manager
Versions 1.0, 1.1
BroadcomInoculateit
Version 6.0
CaEtrust Antivirus
Version 7.0_sp2
CaEtrust Secure Content Manager
Version 1.0
Eset SoftwareNod32 Antivirus
Versions 1.0.11, 1.0.12, 1.0.13

References