CVE-2007-6595

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...

CVE-2007-6596

CVE-2007-6596 affects ClamAV 0.92: Base64 UUEncoded archives bypass the scanner. CVSSv2 base score 5.0 (Medium). Connected documents reiterate the issue but do not specify a patched version or remediation details; no explicit exploit details are provided.

CVE-2007-6595

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...

CVE-2007-6595

The CVE-2007-6595 issue affects ClamAV 0.92, where local users can overwrite arbitrary files via a symlink attack on temporary files used by cli_gentempfd or on .ascii files in sigtool when utf16-decode is enabled. Root cause is a symlink handling flaw during temporary file creation. Impact is lo...

CVE-2007-6337

Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlibprivate.h in ClamAV before 0.92 has unknown impact and remote attack vectors...

CVE-2007-6337

CVE-2007-6337 refers to a vulnerability in the bzip2 decompression code used by clamav (nsis/bzlib_private.h) prior to version 0.92. The connected documents corroborate that this family of issues includes CVE-2007-6335, CVE-2007-6336, and CVE-2007-6337 and indicate vendor advisories and updates t...

CVE-2007-6596

ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file...

CVE-2007-6337: Undefined Security Weakness

Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlibprivate.h in ClamAV before 0.92 has unknown impact and remote attack vectors...

CVE-2007-6595: Improper Link Resolution Before File Access

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...

CVE-2007-6596: Improper Input Validation

ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file...

GLSA-200712-20 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-20 ClamAV: Multiple vulnerabilities iDefense reported an integer overflow vulnerability in the cliscanpe function when parsing Portable Executable PE files packed in the MEW format, that could be exploited to cause a...

ClamAV antivirus multiple security vulnerabilities

Protection bypass with UUEncode, race conditions on temporary files creation...

TK53 Advisory #2: Multiple vulnerabilities in ClamAV

======================================================================== TK53 Advisory 2 12/29/2007 - Multiple vulnerabilities in ClamAV ======================================================================== Authors: Roflek of TK53 [email protected], Lolek of TK53 [email protected] Affecte...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description iDefense reported an integer overflow vulnerability in the cliscanpe function when parsing Portable Executable PE files packed in the MEW format, that could be...

openSUSE 10 Security Update : claws-mail (claws-mail-4835)

clamav has been updated due to security problem. The version number of the clamav library has been changed with that update. Therefore programs like claws-mail that are linked against libclamav need to be updated as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

black-hole.txt

black-hole.pl Sendmail w/ clamav-milter Remote Root Exploit Copyright c 2007 Eliteboy use IO::Socket; print "Sendmail w/ clamav-milter Remote Root Exploit\n"; print "Copyright C 2007 Eliteboy\n"; if $ARGV != 0 print "Give me a host to connect.\n";exit; print "Attacking $ARGV0...\n"; $sock =...

SuSE 10 Security Update : clamav (ZYPP Patch Number 4836)

This version upgrade to 0.92 fixes numerous flaws including some security problems. CVE-2007-6335 / CVE-2007-6336 / CVE-2007-6337 Please note that the version number of the clamav library has changed. Programs linked against libclamav therefore need to be updated as well. %NASLMINLEVEL 70300 C...

openSUSE 10 Security Update : clamav (clamav-4832)

This version upgrade to 0.92 fixes numerous flaws including some security problems CVE-2007-6335, CVE-2007-6336, CVE-2007-6337. Please note that the version number of the clamav library has changed. Programs linked against libclamav therefore need to be updated as well. %NASLMINLEVEL 70300 C...

openSUSE 10 Security Update : klamav (klamav-4837)

clamav has been updated due to security problem. The version number of the clamav library has been changed with that update. Therefore programs like klamav that are linked against libclamav need to be updated as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-1435-1 : clamav - several vulnerabilities

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6335 It was discovered that an integer overflow in the decompression code for MEW archives may lead to the execution ...