CVE-2007-5143 - Vulnerability Details - OpenCVE

F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted (1) archive or (2) packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to system32 could also shut off F-Secure Anti-Virus.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
F-secure	F-secure Anti-virus
Microsoft	Windows 2003 Server

Configuration 1 [-]

AND

cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_anti-virus:7.00:*:windows_servers:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/41377
http://secunia.com/advisories/26948
http://www.f-secure.com/security/fsc-2007-6.shtml
http://www.securityfocus.com/bid/25824
http://www.securitytracker.com/id?1018745
http://www.vupen.com/english/advisories/2007/3277
https://exchange.xforce.ibmcloud.com/vulnerabilities/36833

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-10-01T00:00:00

Updated: 2024-08-07T15:24:40.907Z

Reserved: 2007-09-30T00:00:00

Link: CVE-2007-5143

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-10-01T05:17:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-5143

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-09-27T00:00:00", "descriptions": [{"lang": "en", "value": "F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted (1) archive or (2) packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to system32 could also shut off F-Secure Anti-Virus."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "fsecure-executables-security-bypass(36833)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36833"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.f-secure.com/security/fsc-2007-6.shtml"}, {"name": "25824", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/25824"}, {"name": "1018745", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1018745"}, {"name": "41377", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/41377"}, {"name": "ADV-2007-3277", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3277"}, {"name": "26948", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/26948"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-5143", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted (1) archive or (2) packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to system32 could also shut off F-Secure Anti-Virus."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "fsecure-executables-security-bypass(36833)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36833"}, {"name": "http://www.f-secure.com/security/fsc-2007-6.shtml", "refsource": "CONFIRM", "url": "http://www.f-secure.com/security/fsc-2007-6.shtml"}, {"name": "25824", "refsource": "BID", "url": "http://www.securityfocus.com/bid/25824"}, {"name": "1018745", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1018745"}, {"name": "41377", "refsource": "OSVDB", "url": "http://osvdb.org/41377"}, {"name": "ADV-2007-3277", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3277"}, {"name": "26948", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26948"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:24:40.907Z"}, "title": "CVE Program Container", "references": [{"name": "fsecure-executables-security-bypass(36833)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36833"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.f-secure.com/security/fsc-2007-6.shtml"}, {"name": "25824", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/25824"}, {"name": "1018745", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1018745"}, {"name": "41377", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/41377"}, {"name": "ADV-2007-3277", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/3277"}, {"name": "26948", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/26948"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5143", "datePublished": "2007-10-01T00:00:00", "dateReserved": "2007-09-30T00:00:00", "dateUpdated": "2024-08-07T15:24:40.907Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*", "matchCriteriaId": "CD264C73-360E-414D-BE22-192F92E5A0A3", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:7.00:*:windows_servers:*:*:*:*:*", "matchCriteriaId": "BED6F056-D9E2-4799-A432-DC07F8154AA6", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted (1) archive or (2) packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to system32 could also shut off F-Secure Anti-Virus."}, {"lang": "es", "value": "El antivirus F-Secure para Windows Servers 7.0 en la edici\u00f3n de 64-bit permite a usuarios locales evitar el escaneo de los virus utilizando el directorio system32 para almacenar un (1) archivo o (2) ejecutable paquetizado manipulados. NOTA: en muchos entornos, esto no traspasa los l\u00edmites de los privilegios puesto que cualquier proceso que pueda escribir en el system32 puede tambi\u00e9n apagar el antivirus F-Secure."}], "id": "CVE-2007-5143", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-10-01T05:17:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/41377"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/26948"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.f-secure.com/security/fsc-2007-6.shtml"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/25824"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1018745"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/3277"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36833"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/41377"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/26948"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.f-secure.com/security/fsc-2007-6.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/25824"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1018745"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/3277"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36833"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}