[Full-disclosure] ClamAV: Local Privilege Escalation Vulnerability On MacOS [SCN Advisory #04]

The full, up-to-date advisory will be maintained here: http://www.sentinelchicken.com/advisories/clamav/ For your convenience, a text version is included below. tim -- CLAMAV: LOCAL PRIVILEGE ESCALATION VULNERABILITY ON MACOS =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= TABLE OF...

ClamAV antivirus MacOS X shell characters problem

Shell characters are not filtered in filename than external 'ditto' command in executed with system...

CVE-2005-1795

The filecopy function in misc.c in Clam AntiVirus ClamAV before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is...

CVE-2005-1711

Gibraltar Firewall versions 2.2 and earlier are affected. When using the ClamAV update to 0.81 for Squid, it employs a defunct ClamAV method to scan memory for viruses, which does not return an error code and therefore fails to detect viruses. The vulnerability is confirmed across CVE records (in...

CVE-2005-1711

Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected...

CVE-2004-1876

The CVE-2004-1876 issue affects ClamAV's clamd (VirusEvent directive) prior to version 0.70. The vulnerability arises from using the "%f" parameter to substitute the file name, allowing a local user to trigger shell metacharacters and execute arbitrary commands with privileges of the antivirus pr...

CVE-2004-1909

The CVE-2004-1909 instance concerns ClamAV (0.68 and earlier) where processing certain RAR archives, such as those created by Beagle/Bagle variants, can crash the clamav process leading to a denial of service. Public references in Gentoo GLSA-200404-07 confirm the remote impact vector (RAR archiv...

CVE-2004-1909

Claim Anti-Virus ClamAV 0.68 and earlier allows remote attackers to cause a denial of service crash via certain RAR archives, such as those generated by the Beagle/Bagle worm...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

DEBIAN-CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

DEBIAN-CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

GLSA-200501-46 : ClamAV: Multiple issues

The remote host is affected by the vulnerability described in GLSA-200501-46 ClamAV: Multiple issues ClamAV fails to properly scan ZIP files with special headers CAN-2005-0133 and base64 encoded images in URLs. Impact : By sending a base64 encoded image file in a URL an attacker could evade virus...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0133

CVE-2005-0133 concerns ClamAV 0.80 and earlier, where the clamd daemon can crash (DoS) by processing a ZIP with malformed headers. The OpenVAS/Gentoo/Ubuntu entries confirm the issue affects ClamAV and describe a DoS via crafted ZIPs. Remediation in the connected docs is to upgrade to a newer Cla...