Symantec Norton AntiVirus 2002 and 2003 服务拒绝漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1108041 漏洞类型 未知
发布时间 2004-07-12 更新时间 2004-08-06
CVE编号 CVE-2004-0683 CNNVD-ID CNNVD-200408-120
漏洞平台 Windows CVSS评分 5.0
|漏洞来源
https://www.exploit-db.com/exploits/312
https://www.securityfocus.com/bid/90592
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200408-120
|漏洞详情
SymantecNortonAntiVirus2002and2003存在漏洞。远程攻击者可以通过含有大量目录的压缩文件导致服务拒绝(CPU消耗)。
|漏洞EXP
Norton AntiVirus Denial Of Service Vulnerability

*vulnerable [...only tested on!]

Symantec Norton AntiVirus 2003 Professional Edition
Symantec Norton AntiVirus 2002

*not vulnerable
Mcafee 7*
Mcafee 8*

Risk Impact: Medium
Remote: yes

Description:
While having a virus scan [automatic/manual] of some specially crafted compressed files; NAV triggers a DoS using 100% CPU for a very long time. Morover, NAV is unable to stop the scan in middle, even if the user wishes to manually stop the virus scan. 

Then, in this situation the only alternate is to kill the process. 

--- [Proof of Concept] ---
Please download this file.

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/312.zip (av_bomb_3.zip) <--- For symantec. 

The file contains, 'EICAR Test String' burried in 49647 directories. This is just a RAW 'proof of concept'. A few 100kb's of compressed file could be crafted in a way... NAV will take hours or MIGHT even days to complete the scan causing 100% cup use in email gateways for hours. The compressed archive must not necessarily be a '.zip' to trigger this attack.

PLEASE: ...test this issue with other AV / trojan scanners as they might also be vulnerable. 

-----------
Bipin Gautam
http://www.geocities.com/visitbipin/

Disclaimer: The information in the advisory is believed to be accurate at the time of printing based on currently available information. Use of the information constitutes acceptance for use in an AS IS condition. There are no warranties with regard to this information. Neither the author nor the publisher accepts any liability for any direct, indirect or consequential loss or damage arising from use of, or reliance on this information. 


# milw0rm.com [2004-07-12]
|受影响的产品
Symantec Norton AntiVirus 2003 Professional Edition Symantec Norton AntiVirus 2002 0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2
|参考资料

来源:XF
名称:nav-compressed-dos(16658)
链接:http://xforce.iss.net/xforce/xfdb/16658
来源:BUGTRAQ
名称:20040709NortonAntiVirusDenialOfServiceVulnerability[Part:!!!]
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=108938579712894&w=2