[SECURITY] [DSA 1263-1] New clamav packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1263-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 6th, 2006 http://www.debian.org/security/faq -...

DSA-1263-1 clamav

Bulletin has no description...

ClamAV: Denial of service

Background ClamAV is a GPL virus scanner. Description An anonymous researcher discovered a file descriptor leak error in the processing of CAB archives and a lack of validation of the "id" parameter string used to create local files when parsing MIME headers. Impact A remote attacker can send...

ClamAV MIME头结构ID参数字符串目录遍历漏洞

Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV在解析从MIME头获取的id参数字符串时存在目录遍历漏洞，远程攻击者可能利用此漏洞对ClamAV系统执行拒绝服务攻击。 在解析多部分消息时ClamAV使用上述字符串创建本地文件，如果攻击者发送了类似于“../../../../some/file”的字符串的话就可以创建或覆盖clamd进程所有的任意文件，之后将消息体中的数据写入到这个文件中。成功利用这个漏洞可能导致降低ClamAV病毒扫描服务的性能。 ClamAV 0.88.6 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

GLSA-200703-03 : ClamAV: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200703-03 ClamAV: Denial of Service An anonymous researcher discovered a file descriptor leak error in the processing of CAB archives and a lack of validation of the 'id' parameter string used to create local files when parsing MI...

Mandrake Linux Security Advisory : clamav (MDKSA-2007:043)

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...

SUSE-SA:2006:046: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:046 clamav. Damian Put discovered a bug in the UPX decoder used for scanning UPX compressed Windows executables. The bug allows for a heap buffer overflow and may potentially be exploitable to execute arbitrary code. ClamAV has be...

MDKA-2006:057 : clamav

There are no known security issues with clamav-0.88.5, which was included in the last update MDKSA-2006:184. Upstream has released a new stable 0.88.6, with some bugfixes. This update is to address user reports with regards to clamav's behavior of producing output such as: WARNING: Your ClamAV...

SUSE-SA:2006:060: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:060 clamav. Two security problems have been found and fixed in the anti virus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute...

Mandrake Linux Security Advisory : clamav (MDKSA-2006:230)

The latest version of ClamAV, 0.88.7, fixes some bugs, including vulnerabilities with handling base64-encoded MIME attachment files that can lead to either a a crash CVE-2006-5874, or b a bypass of virus detection CVE-2006-6406. As well, a vulnerability was discovered that allows remote attackers...

Mandrake Linux Security Advisory : clamav (MDKSA-2006:184)

An integer overflow in previous versions of ClamAV could allow a remote attacker to cause a Denial of Service scanning service crash and execute arbitrary code via a Portable Executable PE file CVE-2006-4182. Another vulnerability could allow a remote attacker to cause a DoS via a crafted...

SUSE-SA:2006:078: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:078 clamav. The anti virus scan engine ClamAV has been updated to version 0.88.7 to fix various security problems: CVE-2006-5874: Clam AntiVirus ClamAV allows remote attackers to cause a denial of service crash via a malformed...

Directory traversal

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. dot dot in the id MIME header parameter in a multi-part message...

CVE-2007-0897

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...

CVE-2007-0898

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. dot dot in the id MIME header parameter in a multi-part message...

Open redirect

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...

CVE-2007-0897

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...

DEBIAN-CVE-2007-0898

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. dot dot in the id MIME header parameter in a multi-part message...

DEBIAN-CVE-2007-0897

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...

CVE-2007-0898

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. dot dot in the id MIME header parameter in a multi-part message...