CVE-2004-2405

Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/11712	Patch Vendor Advisory
http://www.f-secure.com/security/fsc-2004-1.shtml	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16258
http://secunia.com/advisories/11712	Patch Vendor Advisory
http://www.f-secure.com/security/fsc-2004-1.shtml	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16258

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:f-secure:f-secure_anti-virus:::linux:::::*
	cpe:2.3:a:f-secure:f-secure_anti-virus:::mimesweeper:::::*
	cpe:2.3:a:f-secure:f-secure_anti-virus:::windows_servers:::::*
	cpe:2.3:a:f-secure:f-secure_anti-virus:::workstations:::::*
	cpe:2.3:a:f-secure:f-secure_anti-virus:::client_security:::::*
	cpe:2.3:a:f-secure:f-secure_anti-virus:::ms_exchange:::::*
	cpe:2.3:a:f-secure:f-secure_anti-virus::::::::
	cpe:2.3:a:f-secure:f-secure_anti-virus:4.60::samba_servers:::::
	cpe:2.3:a:f-secure:f-secure_for_firewalls::::::::
	cpe:2.3:a:f-secure:f-secure_internet_security::::::::
	cpe:2.3:a:f-secure:internet_gatekeeper::::::::

History

No history.

Information

Published : 2004-12-31 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-2405

Mitre link : CVE-2004-2405

CVE.ORG link : CVE-2004-2405

JSON object : View

Products Affected

f-secure

f-secure_anti-virus
internet_gatekeeper
f-secure_for_firewalls
f-secure_internet_security

CWE

NVD-CWE-Other

{"id": "CVE-2004-2405", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"url": "http://secunia.com/advisories/11712", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.f-secure.com/security/fsc-2004-1.shtml", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16258", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/11712", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.f-secure.com/security/fsc-2004-1.shtml", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16258", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B513907-648B-4F67-96D1-E028C389E874", "versionEndIncluding": "4.52"}, {"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:mimesweeper:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1087A49-25FB-4523-B8B6-6095BFD7BB7B", "versionEndIncluding": "5.42"}, {"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:windows_servers:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "131C7D74-C1E0-47D6-8246-5B77330F7E02", "versionEndIncluding": "5.42"}, {"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:workstations:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FA31012-C608-4157-8E9E-4A4CD291323A", "versionEndIncluding": "5.42"}, {"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:client_security:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "482547EC-5A01-43D9-9F97-11C012E0F119", "versionEndIncluding": "5.52"}, {"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:ms_exchange:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52BD1305-8A6C-4FF1-9966-CDE0A1A18E9E", "versionEndIncluding": "6.21"}, {"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A81A600F-BD38-409D-BF4C-0DA25503E475", "versionEndIncluding": "2004"}, {"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8C41338-0651-425E-A823-C8CBD91977D0"}, {"criteria": "cpe:2.3:a:f-secure:f-secure_for_firewalls:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD9176A3-93E8-40E6-A386-4EC5B86EEDDE", "versionEndIncluding": "6.20"}, {"criteria": "cpe:2.3:a:f-secure:f-secure_internet_security:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AA685D1-05A2-4036-A0D9-F2B048B26B0B", "versionEndIncluding": "2004"}, {"criteria": "cpe:2.3:a:f-secure:internet_gatekeeper:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C3DFCF8-010C-4877-A17D-59F6E58A05C0", "versionEndIncluding": "6.32"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}