CVE-2004-2305 Security feature bypass in n/a
Remote attackers can bypass virus scanning in eTrust Antivirus by embedding malicious files in password-protected ZIP archives, allowing malware to evade detection.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-2305?
CVE-2004-2305 is a medium-severity vulnerability in n/a, published on 16 Aug 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files.
Which versions are affected by CVE-2004-2305?
It affects 1 product.
Products include Broadcom Etrust Antivirus Ee.
How do I fix CVE-2004-2305?
No fix has been published for CVE-2004-2305 yet. Limit exposure of the affected software until one is available.
Is CVE-2004-2305 being exploited?
There is no known exploitation of CVE-2004-2305 in the wild and no public exploit code.
Sources
Also known as GHSA-gv3f-qf88-98jx.