DEBIAN-CVE-2005-2070

The ClamAV Mail fILTER clamav-milter 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading...

CVE-2005-2056

The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...

CVE-2005-2056

CVE-2005-2056 affects ClamAV (clamav) via the Quantum archive decompressor in the libmspack component. A crafted Quantum archive can cause a remote denial of service (application crash) in ClamAV, including clamd, for versions before 0.86.1. Multiple open advisories (Gentoo GLSA, Debian DSA, SUSE...

CVE-2005-2056

The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...

CVE-2005-2056

The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...

GLSA-200506-23 : Clam AntiVirus: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-23 Clam AntiVirus: Denial of Service vulnerability Andrew Toller and Stefan Kanthak discovered that a flaw in libmspack's Quantum archive decompressor renders Clam AntiVirus vulnerable to a Denial of Service attack. Impact ...

Clam AntiVirus: Denial of Service vulnerability

Background Clam AntiVirus is a GPL anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. Clam AntiVirus also provides a command line scanner and a tool for fetching updates of the virus database. Description Andrew Toller and Stefan Kanthak discovered that...

CVE-2005-1795

The filecopy function in misc.c in Clam AntiVirus ClamAV before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is...

CVE-2004-1876

The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...

CVE-2004-1876

The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...

CVE-2004-0270

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...

CVE-2004-0270

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...

DEBIAN-CVE-2004-0270

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...

CVE-2004-0270

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...

CVE-2004-0270

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...

CVE-2004-0270

CVE-2004-0270 affects the ClamAV ecosystem, specifically libclamav 0.65. A remote attacker can trigger a denial-of-service by sending a malformed uuencoded e‑mail message with an invalid line length, causing an assert failure in clamd that terminates the calling process. The description in multip...

GLSA-200402-07 : Clam Antivirus DoS vulnerability

The remote host is affected by the vulnerability described in GLSA-200402-07 Clam Antivirus DoS vulnerability Oliver Eikemeier of Fillmore Labs discovered the overflow in Clam AV 0.65 when it handled malformed UUEncoded messages, causing the daemon to shut down. The problem originated in libclama...

ClamAV VirusEvent parameter vulnerability

Background From http://www.clamav.net/ : "Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for...

ClamAV RAR Archive Remote Denial Of Service Vulnerability

Background From http://www.clamav.net/ : "Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for...

clamd - NEVER use "%f" in your "VirusEvent"

date: 30 March 2004 product: clam antivirus author: l0om - l0omatexcluded.org - www.excluded.org clam antivirus is a antivirus program which works very well. it comes with a lot of features and its easy to handle. for normal you start it from the command line on demand but if you use the the dazu...