openSUSE 10 Security Update : clamav (clamav-3080)

The version update to 0.90.2 fixes among other things two security problems CVE-2007-1745, CVE-2007-1997. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-3080. The text description of...

DSA-1281-1 clamav - several vulnerabilities

Bulletin has no description...

CVE-2007-1997

Integer signedness error in the 1 cabunstore and 2 cabextract functions in libclamav/cab.c in Clam AntiVirus ClamAV before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based...

CVE-2007-1997

CVE-2007-1997 describes an integer signedness error in libclamav/cab.c (cab_unstore and cab_extract) of ClamAV before 0.90.2, where a crafted CHM file containing a negative integer can pass a signed comparison and cause a stack-based buffer overflow, enabling remote code execution according to th...

[Full-disclosure] iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability

Clam AntiVirus ClamAV CAB File Unstore Buffer Overflow Vulnerability iDefense Security Advisory 04.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 16, 2007 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. ClamAV is often integrated into e-mail gateways and...

CVE-2006-1997

The CVE-2006-1997 entry concerns Sybase Pylon Anywhere groupware synchronization server prior to version 7.0. The vulnerability is an unspecified issue that enables local users to access sensitive information (email and PIM data) belonging to another user via unknown attack vectors. The available...

FreeBSD : Courier mail services: remotely exploitable buffer overflows (98bd69c3-834b-11d8-a41f-0020ed76ef5a)

The Courier set of mail services use a common Unicode library. This library contains buffer overflows in the converters for two popular Japanese character encodings. These overflows may be remotely exploitable, triggered by a maliciously formatted email message that is later processed by one of t...

CVE-2005-1997

The CVE-2005-1997 vulnerability affects McGallery 1.1, specifically the show.php component. The issue arises when a modified host parameter enables remote attackers to connect to arbitrary databases or to trigger error conditions that disclose sensitive information. The underlying fault is the ha...

CVE-2004-1997

CVE-2004-1997 : Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be world-readable and allow local users to gain privileges. The NVD entry lists a CVSSv2 base score of 4.6 (LOCAL access, LOW attack complexity, PARTIAL confidentiality/integrity/availability impacts). ...

Mandrake Linux Security Advisory : kolab-server (MDKSA-2004:052)

Luca Villani reported the disclosure of critical configuration information within Kolab, the KDE Groupware server. The affected versions store OpenLDAP passwords in plain text. The heart of Kolab is an engine written in Perl that rewrites configuration for certain applications based on templates...

CVE-2002-1997

ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension...

SGI IRIX 5.x6.x - Objectserver

SGI IRIX 5.x6.x - Objectserver // source: https://www.securityfocus.com/bid/1079/info A vulnerability exists in SGI's Objectserver service. By exploiting a vulnerability in this service, remote attackers can add root privileged accounts to the system being compromised. While a patch was made...