CVE-2004-1096: broadcom brightstor_arcserve_backup

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2004-1096

Published 01-12-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-1096 is a high (CVSS 7.5) vulnerability in broadcom brightstor_arcserve_backup. EPSS estimates a 18.96% chance of exploitation in the next 30 days, higher than 97.2% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

44/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

18.96%

0%100%

Medium · +0.15 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Timeline

01-12-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

18.96%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+0.15 pp

From 18.81% on 18-09-2026

18-09-202618-10-2026

EPSS score

18.96%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocalmultipleVerified
Multiple AntiVirus - '.zip' Detection Bypass
Maturity: weaponized