Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Gentoo: GLSA 200410-31 Low: Archive::Zip Virus Detection Evasion

gentoo
Calendar Grey October 29, 2004
Scroller Gentoo
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Adviso
Email virus scanning software relying on Archive::Zip can be fooled into thinking a ZIP attachment is empty while it contains a virus, allowing detection evasion

Summary

Gentoo Linux Security Advisory GLSA 200410-31 https://security.gentoo.org/ Severity: Low Title: Archive::Zip: Virus detection evasion Date: October 29, 2004 Bugs: #68616 ID: 200410-31

Synopsis ======= Email virus scanning software relying on Archive::Zip can be fooled into thinking a ZIP attachment is empty while it contains a virus, allowing detection evasion.
Background ========= Archive::Zip is a Perl module containing functions to handle ZIP archives.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-perl/Archive-Zip < 1.14 >= 1.14
========== Archive::Zip can be used by email scanning software (like amavisd-new) to uncompress attachments befor...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
low
Lowest
Low
Medium
High
Critical

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround