HTTP: WinAmp Skin Download
This signature detects attempts to download compressed WinAmp skin files (WSZ or WAL). WinAmp skin files can contain executeables, which could enable attackers to place malicious software on target hosts.
Extended Description
Remote attackers can exploit this vulnerability to execute arbitrary code with the privileges of the current user.
References
BugTraq: 34009
CVE: CVE-2004-0820
URL: http://www.cknow.com/vtutor/FileExtensions.html http://www.auscert.org.au/render.html?it=4338
Short Name
HTTP:WINAMP-SKIN-DOWNLOAD
Severity
Minor
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2004-0820 Download Skin WinAmp bid:34009
Release Date
08/26/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3659
False Positive
Unknown
CVSS Score
4.6