CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Vulnerability Details : CVE-2009-0042

Multiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterprise 7.1, r8, and r8.1; Anti-Virus 2007 v8 and 2008; Internet Security Suite 2007 v3 and 2008; and other CA products allow remote attackers to bypass virus detection via a malformed archive file.
Publish Date : 2009-01-27 Last Update Date : 2018-10-30
Collapse All   Expand All   Select   Select&Copy  
Search Twitter   Search YouTube   Search Google

- CVSS Scores & Vulnerability Types

CVSS Score
10.0
Confidentiality Impact Complete (There is total information disclosure, resulting in all system files being revealed.)
Integrity Impact Complete (There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised.)
Availability Impact Complete (There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable.)
Access Complexity Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication Not required (Authentication is not required to exploit the vulnerability.)
Gained Access Admin
Vulnerability Type(s) Bypass a restriction or similar
CWE ID CWE id is not defined for this vulnerability

- Products Affected By CVE-2009-0042

# Product Type Vendor Product Version Update Edition Language
1 Application CA Anti-spyware 2007 Version Details Vulnerabilities
2 Application CA Anti-spyware 2008 Version Details Vulnerabilities
3 Application CA Anti-spyware For The Enterprise 8.1 Version Details Vulnerabilities
4 Application CA Anti-spyware For The Enterprise R8 Version Details Vulnerabilities
5 Application CA Anti-virus 2007 8 Version Details Vulnerabilities
6 Application CA Anti-virus 2008 Version Details Vulnerabilities
7 Application CA Anti-virus For The Enterprise 7.1 Version Details Vulnerabilities
8 Application CA Anti-virus For The Enterprise 8.1 Version Details Vulnerabilities
9 Application CA Anti-virus For The Enterprise R8 Version Details Vulnerabilities
10 Application CA Anti-virus Sdk Version Details Vulnerabilities
11 Application CA Antivirus Gateway 7.1 Version Details Vulnerabilities
12 Application CA Arcserve Backup R12.0 Nil Windows Version Details Vulnerabilities
13 Application CA Arcserve Backup R11.1 Nil Windows Version Details Vulnerabilities
14 Application CA Arcserve Backup R11.1 Nil Linux Version Details Vulnerabilities
15 Application CA Arcserve Backup R11.5 Nil Linux Version Details Vulnerabilities
16 Application CA Arcserve Backup R11.5 Nil Windows Version Details Vulnerabilities
17 Application CA Arcserve Client Agent - Windows Version Details Vulnerabilities
18 Application CA Common Services 11 Version Details Vulnerabilities
19 Application CA Common Services 11.1 Version Details Vulnerabilities
20 Application CA Etrust Ez Antivirus R6.1 Version Details Vulnerabilities
21 Application CA Etrust Ez Antivirus R7 Version Details Vulnerabilities
22 Application CA Etrust Intrusion Detection 2.0 SP1 Version Details Vulnerabilities
23 Application CA Etrust Intrusion Detection 3.0 SP1 Version Details Vulnerabilities
24 Application CA Etrust Intrusion Detection 3.0 Version Details Vulnerabilities
25 Application CA Etrust Intrusion Detection 4.0 Version Details Vulnerabilities
26 Application CA Internet Security Suite 2007 3 Version Details Vulnerabilities
27 Application CA Internet Security Suite 2008 Version Details Vulnerabilities
28 Application CA Internet Security Suite Plus 2008 Version Details Vulnerabilities
29 Application CA Network And Systems Management R3.0 Version Details Vulnerabilities
30 Application CA Network And Systems Management R3.1 Version Details Vulnerabilities
31 Application CA Network And Systems Management R11.1 Version Details Vulnerabilities
32 Application CA Network And Systems Management R11 Version Details Vulnerabilities
33 Application CA Protection Suites R3.1 Version Details Vulnerabilities
34 Application CA Protection Suites R2 Version Details Vulnerabilities
35 Application CA Protection Suites R3 Version Details Vulnerabilities
36 Application CA Secure Content Manager 8.0 Version Details Vulnerabilities
37 Application CA Secure Content Manager 8.1 Version Details Vulnerabilities
38 Application CA Threat Manager For The Enterprise 8.1 Version Details Vulnerabilities
39 Application CA Threat Manager For The Enterprise R8 Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor Product Vulnerable Versions
CA Anti-spyware 2
CA Anti-spyware For The Enterprise 2
CA Anti-virus 2
CA Anti-virus For The Enterprise 3
CA Anti-virus Sdk 1
CA Antivirus Gateway 1
CA Arcserve Backup 5
CA Arcserve Client Agent 1
CA Common Services 2
CA Etrust Ez Antivirus 2
CA Etrust Intrusion Detection 4
CA Internet Security Suite 2007 1
CA Internet Security Suite 2008 1
CA Internet Security Suite Plus 2008 1
CA Network And Systems Management 4
CA Protection Suites 3
CA Secure Content Manager 2
CA Threat Manager For The Enterprise 2

- References For CVE-2009-0042

https://exchange.xforce.ibmcloud.com/vulnerabilities/48261
XF ca-antivirus-engine-security-bypass(48261)
http://www.securitytracker.com/id?1021639
SECTRACK 1021639
http://www.vupen.com/english/advisories/2009/0270
VUPEN ADV-2009-0270
http://www.securityfocus.com/bid/33464
BID 33464 Computer Associates Anti-Virus Engine 'arclib.dll' Multiple Scan Evasion Vulnerabilities Release Date:2009-05-12
http://www.securityfocus.com/archive/1/500417/100/0/threaded
BUGTRAQ 20090127 CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/26/ca20090126-01-ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities.aspx CONFIRM
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197601 CONFIRM

- Metasploit Modules Related To CVE-2009-0042

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.