Debian DSA-1366-1 : clamav - several vulnerabilities

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-4510 It was discovered that the RTF and RFC2397 parsers can be tricked into dereferencing a NULL pointer, resulting i...

clamav-milter shell characters vulnerability

Insecure popen call with user-controlled value...

ClamAV Milter <= 0.92.2 Blackhole-Mode (sendmail) Code Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

ClamAV Milter 0.92.2 - Blackhole-Mode (Sendmail) Code Execution (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ClamAV Milte...

ClamAV Milter 0.92.2 - Blackhole-Mode (Sendmail) Code Execution (Metasploit)

ClamAV Milter 0.92.2 - Blackhole-Mode Sendmail Code Execution Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FreeBSD : milter-bogom -- headerless message crash (6d9a28f8-8152-11da-817c-0001020eed82)

Juan J. Maritnez reports : The milter crashes while processing a headerless message Impact: bogom crashes and sendmail moves it to error state %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database...

Security fix for the ALT Linux 8 package clamav version 0.88.1-alt1

April 6, 2006 Victor Forsyuk 0.88.1-alt1 - 0.88.1 - Fixed CVE-2006-1614, CVE-2006-1615 and CVE-2006-1630. - Patches for clamav-milter from Sergey Y. Afonin...

Security fix for the ALT Linux 9 package clamav version 0.88.1-alt1

April 6, 2006 Victor Forsyuk 0.88.1-alt1 - 0.88.1 - Fixed CVE-2006-1614, CVE-2006-1615 and CVE-2006-1630. - Patches for clamav-milter from Sergey Y. Afonin...

milter-bogom -- headerless message crash

Juan J. Marítnez reports: The milter crashes while processing a headerless message Impact: bogom crashes and sendmail moves it to error state...

SUSE-SA:2005:038: clamav

The remote host is missing the patch for the advisory SUSE-SA:2005:038 clamav. This security update upgrades the Clamav virus scan engine to the version 0.68.1. Among other bugfixes and improvements, this update fixes a bug in the Quantum decompressor routines that can be used for a remote denial...

CVE-2005-2070

CVE-2005-2070 affects the ClamAV Mail fILTER (clamav-milter) when used with Sendmail and long timeouts. Affected versions: 0.84–0.85d; vulnerability allows remote attackers to cause a denial of service by keeping an open connection, preventing ClamAV from reloading. Debian/DSA-737-1 recommendatio...

long sendmail timeouts let attacker prevent milter quiesce

Summary: An attacker that can predict when a milter will need to quiesce input to allow for a reload may hold open an SMTP session for several hours. This will lead to a DoS condition on the mailserver. Background: Sendmail is a popular Mail Transfer Agent MTA, used in many large sites that requi...

DEBIAN-CVE-2003-0946

Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command...