ID de Prueba:	1.3.6.1.4.1.25623.1.0.900720
Categoría:	Remote file access
Título:	AVG AntiVirus Engine Malware Detection Bypass Vulnerability (Linux)
Resumen:	This host is installed with AVG AntiVirus Server Edition for Linux; and is prone to Malware Detection Bypass Vulnerability.
Descripción:	Summary: This host is installed with AVG AntiVirus Server Edition for Linux and is prone to Malware Detection Bypass Vulnerability. Vulnerability Insight: Error in the file parsing engine can be exploited to bypass the anti-virus scanning functionality via a specially crafted ZIP or RAR file. Vulnerability Impact: Successful exploitation will let the attacker craft malwares in a crafted archive file and spread it across the network to gain access to sensitive information or cause damage to the remote system. Affected Software/OS: AVG Anti-Virus Server Edition prior to 8.5.323 on Linux Solution: Upgrade to the AVG Anti-Virus Scanning Engine build 8.5.323. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	BugTraq ID: 34895 Common Vulnerability Exposure (CVE) ID: CVE-2009-1784 http://www.securityfocus.com/bid/34895 Bugtraq: 20090509 [TZO-20-2009] AVG ZIP evasion / bypass (Google Search) http://www.securityfocus.com/archive/1/503392/100/0/threaded http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html XForce ISS Database: avg-zip-security-bypass(50426) https://exchange.xforce.ibmcloud.com/vulnerabilities/50426
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.