CVE:CVE-2004-0935
CNNVD:CNNVD-200501-297
Eset Anti-Virus是一款防病毒软件。
Eset Anti-Virus 1.020之前版本对zip文件处理存在问题，导致zip文件可绕过防病毒检测。
攻击者可构造特殊对zip文件，将其local及global header均设置为0，即可绕过防病毒检测，而该zip文件可正常解压。
solution:Upgrade archive_zip archive_zip to a higher version than 1.13,and avoid the version 1.13; Upgrade broadcom brightstor_arcserve_backup to a higher version than 11.1,and avoid the version 11.1; Upgrade broadcom etrust_antivirus to a higher version than 7.0,7.1,and avoid the version 7.0,7.1; Upgrade broadcom etrust_antivirus_gateway to a higher version than 7.0,7.1,and avoid the version 7.0,7.1; Upgrade broadcom etrust_ez_antivirus to a higher version than 6.1,6.2,6.3,and avoid the version 6.1,6.2,6.3; Upgrade broadcom etrust_ez_armor to a higher version than 2.0,2.3,2.4,and avoid the version 2.0,2.3,2.4; Upgrade broadcom etrust_intrusion_detection to a higher version than 1.4.1.13,1.4.5,1.5,and avoid the version 1.4.1.13,1.4.5,1.5; Upgrade broadcom etrust_secure_content_manager to a higher version than 1.0,1.1,and avoid the version 1.0,1.1; Upgrade broadcom inoculateit to a higher version than 6.0,and avoid the version 6.0; Upgrade ca etrust_antivirus to a higher version than 7.0_sp2,and avoid the version 7.0_sp2; Upgrade ca etrust_secure_content_manager to a higher version than 1.0:sp1,and avoid the version 1.0:sp1; Upgrade eset_software nod32_antivirus to a higher version than 1.0.11,1.0.12,1.0.13,and avoid the version 1.0.11,1.0.12,1.0.13; Upgrade kaspersky_lab kaspersky_anti-virus to a higher version than 3.0,4.0,5.0,and avoid the version 3.0,4.0,5.0; Upgrade mcafee antivirus_engine to a higher version than 4.3.20,and avoid the version 4.3.20; Upgrade rav_antivirus rav_antivirus_desktop to a higher version than 8.6,and avoid the version 8.6; Upgrade rav_antivirus rav_antivirus_for_file_servers to a higher version than 1.0,and avoid the version 1.0; Upgrade rav_antivirus rav_antivirus_for_mail_servers to a higher version than 8.4.2,and avoid the version 8.4.2; Upgrade sophos sophos_anti-virus to a higher version than 3.4.6,3.78,3.78d,3.79,3.80,3.81,3.82,3.83,3.84,3.85,3.86,and avoid the version 3.4.6,3.78,3.78d,3.79,3.80,3.81,3.82,3.83,3.84,3.85,3.86; Upgrade sophos sophos_puremessage_anti-virus to a higher version than 4.6,and avoid the version 4.6; Upgrade sophos sophos_small_business_suite to a higher version than 1.0,and avoid the version 1.0; Upgrade gentoo linux to a higher version than *,1.4,and avoid the version 1.4; Upgrade mandrakesoft mandrake_linux to a higher version than 10.1,and avoid the version 10.1; Upgrade suse suse_linux to a higher version than 9.2,and avoid the version 9.2