Resultados de ClamAV en Debian 9: LibreOfficeMacros y PUA.Win.Exploit.CVE_2012_0110-1 - ¿falsos positivos?

2

Estoy ejecutando un Debian 9.1 recientemente instalado con KDE y un análisis ClamAV me da estos resultados:

/usr/lib/libreoffice/share/extensions/wiki-publisher/WikiEditor/Module1.xba      PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Template/ModuleAgenda.xba                       PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/Listbox.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/Main.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/Language.xba                       PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/API.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/FilesModul.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/ImportWizard/DialogModul.xba                    PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/Language.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/FormWizard.xba                       PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/tools.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/develop.xba                          PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Template/Autotext.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/Layouter.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/FormWizard/DBMeta.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/ConvertRun.xba                             PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Protect.xba                                PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Init.xba                                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Common.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Hard.xba                                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Soft.xba                                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/Writer.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Euro/AutoPilotRun.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Template/Samples.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_zh.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_tw.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_ja.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_en.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_ko.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Internet.xba                              PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_de.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_it.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Currency.xba                              PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/CommonLang.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Template/Correspondence.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/tools.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_es.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_sv.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Lang_fr.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Depot/Depot.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/RoadMap.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/TutorialClose.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/TutorialCreator.xba                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/ShowInfoDialog.xba                    PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/TutorialOpen.xba                      PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/ModuleControls.xba                        PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tutorials/Functions.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/AutoText.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/ReadDir.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/GetTexts.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/ChangeAllChars.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Gimmicks/Userfields.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Trace.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Recordset.xba                       PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Field.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/L10N.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/Debug.xba                                 PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Database.xba                        PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Application.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Utils.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/_License.xba                        PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Form.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/OptionGroup.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/CommandBar.xba                      PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/PropertiesSet.xba                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Event.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/CommandBarControl.xba               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/Strings.xba                               PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/DataDef.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Control.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/acConstants.xba                     PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/TempVar.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Root_.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/UtilProperty.xba                    PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/PropertiesGet.xba                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Test.xba                            PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/SubForm.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/DoCmd.xba                           PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Tools/UCB.xba                                   PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Compatible.xba                      PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Property.xba                        PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Collect.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Dialog.xba                          PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/share/basic/Access2Base/Methods.xba                         PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/lib/libreoffice/presets/basic/Standard/Module1.xba                          PUA.Doc.Tool.LibreOfficeMacro-2     
/usr/share/mime/mime.cache                                                       PUA.Win.Exploit.CVE_2012_0110-1     
/usr/lib/libreoffice/share/basic/Tools/Misc.xba                                  PUA.Doc.Tool.LibreOfficeMacro-2     

¿Son todos estos falsos positivos? ¿Cómo comprobar mejor si son? ¿Otras personas también están obteniendo estos hallazgos? ¿Debo simplemente eliminarlos o esos archivos son necesarios o útiles?

No instalé ninguna extensión de libreoffice. Parece que se instalaron en la instalación inicial.

Alguien preguntó por PUA.Win.Exploit.CVE_2012_0110-1 anteriormente. ¿Es suficiente ejecutar sudo update-mime-database /usr/share/mime/ para solucionarlo?
Hice eso y devolví Unknown media type in type 'all/all' Unknown media type in type 'all/allfiles' y después de otra exploración mostró el mismo hallazgo nuevamente.

Todavía soy nuevo en GNU / Linux y no estoy seguro de que esta pregunta sea más apropiada aquí o en Unix & Linux Stack Exchange.

    
pregunta mYnDstrEAm 30.07.2017 - 21:25
fuente

1 respuesta

1

Estoy obteniendo exactamente lo mismo en Ubuntu. Parecen ser un grupo de macros incluidas, incluyendo tutoriales. En todo caso, ponga en cuarentena y asegúrese de que LibreOffice funcione.

Si necesitas usar las macros más tarde o si tu libre deja de funcionar, puedes restaurar los archivos.

    
respondido por el David Kamer 21.12.2017 - 01:54
fuente

Lea otras preguntas en las etiquetas