http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx

http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601

20090127 CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities

33464

1021639

ADV-2009-0270

ca-antivirus-engine-security-bypass(48261)

The Computer Associates (CA) antivirus scan engine installed on the remote host is affected by multiple scan evasion vulnerabilities due to a failure to handle certain malformed archive files. An attacker can exploit this, via crafted archive files, to evade detection by the scan engine.

CVE-2009-0042

high

Tenable Plugins

medium