Lucene search
Gentoo FoundationGLSA-200612-18HistoryDec 18, 2006 - 12:00 a.m.
ClamAV: Denial of service
2006-12-1800:00:00
Gentoo Foundation
security.gentoo.org
10
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.096
Percentile
94.8%
Background
ClamAV is a GPL virus scanner.
Description
Hendrik Weimer discovered that ClamAV fails to properly handle deeply nested MIME multipart/mixed content.
Impact
By sending a specially crafted email with deeply nested MIME multipart/mixed content an attacker could cause ClamAV to crash.
Workaround
There is no known workaround at this time.
Resolution
All ClamAV users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.88.7"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | app-antivirus/clamav | < 0.88.7 | UNKNOWN |
Related
openvas
openvas
FreeBSD Ports: clamav
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200612-18 (clamav)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200612-18 (clamav)
2008-09-24 00:00:00
nessus
nessus
FreeBSD : clamav -- Multipart Nestings Denial of Service (eb5124a4-8a20-11db-b033-00123ffe8333)
2006-12-14 00:00:00
GLSA-200612-18 : ClamAV: Denial of Service
2006-12-30 00:00:00
Debian DSA-1238-1 : clamav - several vulnerabilities
2006-12-18 00:00:00
freebsd
freebsd
clamav -- Multipart Nestings Denial of Service
2006-12-06 00:00:00
debian
debian
[SECURITY] [DSA 1238-1] New clamav packages fix several vulnerabilities
2006-12-17 15:05:33
osv
osv
clamav
2006-12-17 00:00:00
nvd
nvd
CVE-2006-6481
2006-12-12 01:28:00
cvelist
cvelist
CVE-2006-6481
2006-12-12 01:00:00
debiancve
debiancve
CVE-2006-6481
2006-12-12 01:28:00
suse
suse
remote denial of service in clamav
2006-12-18 13:01:38
ubuntucve
ubuntucve
CVE-2006-6481
2006-12-12 00:00:00
cve
cve
CVE-2006-6481
2006-12-12 01:28:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.096
Percentile
94.8%
Related for GLSA-200612-18