Vulnerability Details CVE-2006-6409
F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.2%
CVSS Severity
CVSS v2 Score 10.0
References
- http://www.quantenblog.net/security/virus-scanner-bypass
- http://www.securityfocus.com/archive/1/453654/100/0/threaded
- http://www.securityfocus.com/bid/21461
- http://www.quantenblog.net/security/virus-scanner-bypass
- http://www.securityfocus.com/archive/1/453654/100/0/threaded
- http://www.securityfocus.com/bid/21461
Products affected by CVE-2006-6409
-
cpe:2.3:a:f-secure:f-secure_anti-virus:4.65