ClamAV Mail Filter Extension Crafted Recipient Command Execution (CVE-2007-4560)

ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. ClamAV includes a milter mail filter for the mail transfer agents MTA such as Sendmail. A milter is a mail filter extension used for MTAs that allows third-party programs to access ma...

CVE-2009-4560

creationtimestamp| type| source ---|---|--- 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9162...

HP-UX PHSS_38783 : HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data (HPSBMA02406 SSRT080100 rev.2)

s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 21 : Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to allow execution of arbitrary code or unauthorized access to data. %NASLMINLEVEL 70300 C...

HP-UX PHSS_38782 : HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data (HPSBMA02406 SSRT080100 rev.2)

s700800 11.X OV NNM7.53 PA-RISC Intermediate Patch 21 : Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to allow execution of arbitrary code or unauthorized access to data. %NASLMINLEVEL 70300 C...

Mandriva Update for clamav MDKSA-2007:172 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDKSA-2007:172 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2008-4560

CVE-2008-4560 affects HP OpenView Network Node Manager (OV NNM) versions 7.01, 7.51, and 7.53. The vulnerability is an information disclosure in which remote attackers can obtain sensitive details via: (1) a crafted request to nnmRptConfig.exe CGI, revealing log directory pathnames; and (2) a cra...

ClamAV Milter Blackhole-Mode Remote Code Execution

This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...

Debian: Security Advisory (DSA-1366-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-4560)

A buffer overflow in the DTLS implementation of openssl could be exploited by attackers to potentially execute arbitrary code CVE-2007-4995. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

SOL7985 - ClamAV clamav-milter vulnerability - CVE-2007-4560

The FirePass controller can be configured to provide anti-virus scanning of files uploaded through Portal Access through the ClamAV open source software. Scanning is configured on the Antivirus tab of the Portal Access: Content Inspection page, through the Enable Standalone virus Scanner option...

ClamAV milter popen command injection

Added: 09/06/2007 CVE: CVE-2007-4560 BID: 25439 OSVDB: 36909 Background ClamAV is an open-source anti-virus toolkit. clamav-milter is a derivative of ClamAV for e-mail servers running Sendmail. Problem An insecure call to the popen function in clamav-milter, when running in black hole mode, allow...

ClamAV milter popen command injection

Added: 09/06/2007 CVE: CVE-2007-4560 BID: 25439 OSVDB: 36909 Background ClamAV is an open-source anti-virus toolkit. clamav-milter is a derivative of ClamAV for e-mail servers running Sendmail. Problem An insecure call to the popen function in clamav-milter, when running in black hole mode, allow...

ClamAV milter popen command injection

Added: 09/06/2007 CVE: CVE-2007-4560 BID: 25439 OSVDB: 36909 Background ClamAV is an open-source anti-virus toolkit. clamav-milter is a derivative of ClamAV for e-mail servers running Sendmail. Problem An insecure call to the popen function in clamav-milter, when running in black hole mode, allow...

Security fix for the ALT Linux 9 package clamav version 0.91.2-alt1

Sept. 3, 2007 Victor Forsyuk 0.91.2-alt1 - 0.91.2 fixes for CVE-2007-4510, CVE-2007-4560...

Security fix for the ALT Linux 8 package clamav version 0.91.2-alt1

Sept. 3, 2007 Victor Forsyuk 0.91.2-alt1 - 0.91.2 fixes for CVE-2007-4510, CVE-2007-4560...

Security fix for the ALT Linux 10 package clamav version 0.91.2-alt1

Sept. 3, 2007 Victor Forsyuk 0.91.2-alt1 - 0.91.2 fixes for CVE-2007-4510, CVE-2007-4560...

[SECURITY] [DSA 1366-1] New clamav packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1366-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 1st, 2007 http://www.debian.org/security/faq -...

CVE-2007-4560

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."...

CVE-2007-4560

CVE-2007-4560 affects clamav-milter in ClamAV before 0.91.2. When used with Sendmail in black hole mode, an attacker can craft SMTP inputs to trigger an insecure popen call and execute arbitrary commands remotely. The issue is a remote code execution vulnerability in the milter component, with re...

ClamAV Milter <= 0.92.2 Blackhole-Mode (sendmail) Code Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...