----------------------------------------------------------------------

Are you missing:

SECUNIA ADVISORY ID:

Critical:

Impact:

Where:

within the advisory below?

This is now part of the Secunia commercial solutions.

Click here to learn more about our commercial solutions:
http://secunia.com/advisories/business_solutions/
        
Click here to trial our solutions:
http://secunia.com/advisories/try_vi/

----------------------------------------------------------------------

TITLE:
F-Secure Products ZIP and RAR Archives Security Bypass

SECUNIA ADVISORY ID:
SA35008

VERIFY ADVISORY:
http://secunia.com/advisories/35008/

DESCRIPTION:
A weakness has been reported in various F-Secure products, which can
be exploited by malware to bypass the scanning functionality.

The weakness is caused due to an error in the handling of ZIP and RAR
files and can be exploited to bypass the anti-virus scanning
functionality via a specially crafted ZIP or RAR file.

The weakness affects the following products:
* F-Secure Anti-Virus for Microsoft Exchange 7.10 and earlier
* F-Secure Internet Gatekeeper for Windows 6.61 and earlier
* F-Secure Internet Gatekeeper for Linux 2.16 and earlier
* F-Secure Internet Gatekeeper for Linux Japanese 3.01 and earlier
* Solutions based on F-Secure Protection Service for Business -
E-mail and Server security version 8.00 and earlier
* F-Secure Internet Security 2009 and earlier
* F-Secure Anti-Virus 2009 and earlier
* F-Secure Client Security 8.0 and earlier
* F-Secure Anti-Virus for Workstations 8.0 and earlier
* F-Secure Linux Security 7.01 and earlier
* F-Secure Anti-Virus Linux Client Security 5.54 and earlier
* Solutions based on F-Secure Protection Service for Consumers
version 8.00 and earlier
* Solutions based on F-Secure Protection Service for Business -
Workstation security version 8.00 and earlier
* F-Secure Home Server Security 2009
* F-Secure Anti-Virus for Windows Servers 8.00 and earlier
* F-Secure Anti-Virus for Citrix Servers 7.00 and earlier
* F-Secure Linux Security 7.02 and earlier
* F-Secure Anti-Virus Linux Server Security 5.54 and earlier
* F-Secure Anti-Virus for Linux Servers 4.65
* F-Secure Anti-Virus for MIMEsweeper 5.61 and earlier

SOLUTION:
Apply patches. Please see the vendor's advisory for details.

PROVIDED AND/OR DISCOVERED BY:
The vendor credits Roger Mickael.

ORIGINAL ADVISORY:
FSC-2009-1:
http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2009-1.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------