CVE-2006-5645 Denial of service in n/a
Remote attackers can cause a denial of service via a malformed RAR archive when archive scanning is enabled in Sophos Anti-Virus.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-5645?
CVE-2006-5645 is a medium-severity denial of service vulnerability in n/a, published on 1 Nov 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.
Weakness: CWE-399
Which versions are affected by CVE-2006-5645?
It affects 2 products.
Products include Sophos Anti-Virus, Sophos Endpoint Security.
How do I fix CVE-2006-5645?
No fix has been published for CVE-2006-5645 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2006-5645 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-5645 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as CVE-2007-5645, GHSA-8fp6-957g-c524.