Lucene search

K
freebsdFreeBSDEB5124A4-8A20-11DB-B033-00123FFE8333
HistoryDec 06, 2006 - 12:00 a.m.

clamav -- Multipart Nestings Denial of Service

2006-12-0600:00:00
vuxml.freebsd.org
17

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.096 Low

EPSS

Percentile

94.7%

Secunia reports:

Clam AntiVirus have a vulnerability, which can be exploited by
malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to a stack overflow when scanning
messages with deeply nested multipart content. This can be
exploited to crash the service by sending specially crafted emails
to a vulnerable system.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchclamav< 0.88.7UNKNOWN
FreeBSDanynoarchclamav-devel<= 20061029UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.096 Low

EPSS

Percentile

94.7%

Related for EB5124A4-8A20-11DB-B033-00123FFE8333