Information disclosure

An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 running with an injected malicious dylib to communicate with ClamXAV 3's helper tool and perform privileged operations. This occurs because of inadequate client verification in the...

CVE-2020-26893

An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 running with an injected malicious dylib to communicate with ClamXAV 3's helper tool and perform privileged operations. This occurs because of inadequate client verification in the...

CVE-2020-26893

CVE-2020-26893 affects ClamXAV 3.x prior to 3.1.1. A vulnerability arises from inadequate authentication of the client in the ClamXAV 3 helper tool, enabling a correctly signed ClamXAV 2 instance running with a malicious injected dylib to communicate with the helper and perform privileged operati...

CVE-2020-26893: Insufficient Verification of Data Authenticity

An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 running with an injected malicious dylib to communicate with ClamXAV 3's helper tool and perform privileged operations. This occurs because of inadequate client verification in the...

PT-2020-16535

Name of the Vulnerable Software and Affected Versions ClamXAV versions prior to 3.1.1 Description An issue was discovered in ClamXAV where a malicious actor could use a properly signed copy of ClamXAV 2, running with an injected malicious dylib, to communicate with ClamXAV 3's helper tool and...

Design/Logic Flaw

freshclam in 1 Clam Antivirus ClamAV 0.88 and 2 ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file...

CVE-2006-2427

freshclam in 1 Clam Antivirus ClamAV 0.88 and 2 ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file...

CVE-2006-2427

freshclam in 1 Clam Antivirus ClamAV 0.88 and 2 ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file...

CVE-2006-2427

The CVE affects freshclam in Clam Antivirus (ClamAV) 0.88 and ClamXav 1.0.3h and earlier. The root cause is that the process does not drop privileges before handling the config-file command line option, enabling local users to read portions of arbitrary files when an error message displays the fi...

CVE-2006-2427

freshclam in 1 Clam Antivirus ClamAV 0.88 and 2 ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file...

CVE-2006-2427: Undefined Security Weakness

freshclam in 1 Clam Antivirus ClamAV 0.88 and 2 ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file...