OSVDB ID: 6189

Title: Multiple Virus Scanner bzip2 Decompression DoS

Info

Disclosure
Jan 09, 2004

Discovery
Unknown

Dates

Exploit
Jan 09, 2004

Solution
Unknown

Description

 Multiple Virus Scanners contain a flaw that may allow a remote denial of service. The issue is triggered when the application attempts to decompress an excessively large bzip2 archive which will cause the antivirus product to consume a majority of the CPU resources, resulting in a loss of availability for the system.

Classification

 Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

 Consult your vendor for an appropriate patch or upgrade.

Products

AMaViS

AMaViS

 0.2 pre-4
0.2 pre-5
0.2 pre6-20000604
0.2 pre6-20000704
0.3.12
0.3.12 pre6
0.3.12 pre7
0.3.12 pre8

amavisd

 0.1
snapshot-20020300
snapshot-20020531

Kaspersky Lab

Kaspersky Antivirus for Linux Servers

 5.0.1.0

McAfee, Inc.

Virus Scan for Linux

 4.16.0

Trend Micro, Inc.

InterScan VirusWall

 3.8 Build 1130

References

Credit
  • Dr. Peter Bieringer - pbieringeraerasec.de - AERAsec Network Services and Security


Direct URL: http://osvdb.org/36218