Vulnerabilities > CVE-2009-0042

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

broadcom

critical

nessus

NVD

Published: 2009-01-28

Updated: 2021-04-09

Summary

Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.

Vulnerable Configurations

Part	Description	Count
Application	Broadcom Broadcom Anti Spyware 2007 Broadcom Anti Spyware 2008 Broadcom Anti Spyware FOR THE Enterprise 8.1 Broadcom Anti Spyware FOR THE Enterprise R8 Broadcom Anti Virus 2007 Broadcom Anti Virus 2008 Broadcom Anti Virus FOR THE Enterprise 7.1 Broadcom Anti Virus FOR THE Enterprise 8.1 Broadcom Anti Virus FOR THE Enterprise R8 Broadcom Anti Virus SDK * Broadcom Antivirus Gateway 7.1 Broadcom Arcserve Client Agent - Broadcom Common Services 11 Broadcom Common Services 11.1 Broadcom Etrust EZ Antivirus R6.1 Broadcom Etrust EZ Antivirus R7 Broadcom Etrust Intrusion Detection 3.0 Broadcom Etrust Intrusion Detection 4.0 Broadcom Network AND Systems Management R3.0 Broadcom Network AND Systems Management R3.1 Broadcom Network AND Systems Management R11 Broadcom Network AND Systems Management R11.1 Broadcom Secure Content Manager 8.0 Broadcom Secure Content Manager 8.1	24
Application	Ca CA Arcserve Backup R11.1 CA Arcserve Backup R11.5_Nil_ CA Arcserve Backup R12.0_Nil_ CA Etrust Intrusion Detection 2.0 CA Etrust Intrusion Detection 3.0 CA Internet Security Suite 2007 3 CA Internet Security Suite 2008 * CA Internet Security Suite Plus 2008 * CA Protection Suites R2 CA Protection Suites R3 CA Protection Suites R3.1 CA Threat Manager FOR THE Enterprise 8.1 CA Threat Manager FOR THE Enterprise R8	15

Nessus

NASL family	Windows
NASL id	CA_AV_ARCHIVE_FILE_EVASION.NASL
description	The Computer Associates (CA) antivirus scan engine installed on the remote host is affected by multiple scan evasion vulnerabilities due to a failure to handle certain malformed archive files. An attacker can exploit this, via crafted archive files, to evade detection by the scan engine.
last seen	2020-06-01
modified	2020-06-02
plugin id	35473
published	2009-01-28
reporter	This script is Copyright (C) 2009-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/35473
title	CA Antivirus Engine Multiple Scan Evasion

Vulnerabilities > CVE-2009-0042 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2009-0042"}]}

Summary

Vulnerable Configurations

Nessus

References

Vulnerabilities > CVE-2009-0042