CVE-2002-1109: Low severity Amavis virus scanner vulnerability
Published Oct 4, 2002
·Updated
securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service (CPU consumption) via a malformed TAR file, possibly via an incorrect file size parameter.
Affected Software
1 affected component
Amavis virus scanner<=0.2.1
Event History
Oct 4, 2002
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1109?
CVE-2002-1109 is considered a denial of service vulnerability that can cause high CPU consumption.
2
How do I fix CVE-2002-1109?
To fix CVE-2002-1109, upgrade to a version of AMaViS later than 0.2.1.
3
What software is affected by CVE-2002-1109?
CVE-2002-1109 affects AMaViS virus scanner versions 0.2.1 and earlier.
4
Can CVE-2002-1109 be exploited remotely?
Yes, CVE-2002-1109 can potentially be exploited remotely through a malformed TAR file.
5
What type of attack does CVE-2002-1109 enable?
CVE-2002-1109 enables denial of service attacks by consuming excessive CPU resources.