[SECURITY] [DSA 1050-1] New ClamAV packages fix denial of service or arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1050-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2006 http://www.debian.org/security/faq -...

GLSA-200605-03 : ClamAV: Buffer overflow in Freshclam

The remote host is affected by the vulnerability described in GLSA-200605-03 ClamAV: Buffer overflow in Freshclam Ulf Harnhammar and an anonymous German researcher discovered that Freshclam fails to check the size of the header data returned by a webserver. Impact : By enticing a user to connect ...

CVE-2006-1989

Buffer overflow in the getdatabase function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers...

CVE-2006-1989

CVE-2006-1989 affects ClamAV’s HTTP client in the Freshclam updater, with a buffer overflow in the get_database function that can be triggered by oversized HTTP headers. Impact: potential remote code execution or a denial of service on vulnerable installations running ClamAV versions 0.80 through...