Lucene search
RootSSV:3180HistoryApr 17, 2008 - 12:00 a.m.
ClamAV ARJ文件解析拒绝服务漏洞
2008-04-1700:00:00
Root
www.seebug.org
10
0.078 Low
EPSS
Percentile
93.5%
BUGTRAQ ID: 28782
CVE(CAN) ID: CVE-2008-1387
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。
ClamAV在处理畸形格式的ARJ文件时存在漏洞，远程攻击者可能利用此漏洞导致布署了ClamAV的服务器不可用。
如果在邮件服务器上部署了ClamAV的话，则向该服务器发送带有ARJ格式附件的恶意邮件就可以导致服务器崩溃。
ClamAV ClamAV < 0.92.1
ClamAV
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
<a href=“http://www.clamav.net/” target=“_blank”>http://www.clamav.net/</a>
http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
Related
cve
cve
CVE-2008-1387
2008-04-16 16:05:00
prion
prion
Code injection
2008-04-16 16:05:00
securityvulns
securityvulns
ClamAV antivirus multiple security vulnerabilities
2008-04-16 00:00:00
ubuntucve
ubuntucve
CVE-2008-1387
2008-04-16 00:00:00
debiancve
debiancve
CVE-2008-1387
2008-04-16 16:05:00
cvelist
cvelist
CVE-2008-1387
2008-04-16 16:00:00
freebsd
freebsd
clamav -- Multiple Vulnerabilities
2008-04-15 00:00:00
openvas
openvas
FreeBSD Ports: clamav
2008-09-04 00:00:00
FreeBSD Ports: clamav
2008-09-04 00:00:00
Fedora Update for clamav FEDORA-2008-3900
2009-02-17 00:00:00
nessus
nessus
FreeBSD : clamav -- Multiple Vulnerabilities (589d8053-0b03-11dd-b4ef-00e07dc4ec84)
2008-04-18 00:00:00
Fedora 8 : clamav-0.92.1-2.fc8 (2008-3420)
2008-05-01 00:00:00
Fedora 9 : clamav-0.93-1.fc9 (2008-3900)
2008-05-16 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package clamav version 0.93-alt1
2008-04-15 00:00:00
Security fix for the ALT Linux 9 package clamav version 0.93-alt1
2008-04-15 00:00:00
Security fix for the ALT Linux 8 package clamav version 0.93-alt1
2008-04-15 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: clamav-0.93-1.fc9
2008-05-14 22:09:25
[SECURITY] Fedora 8 Update: clamav-0.92.1-2.fc8
2008-04-29 21:01:37
[SECURITY] Fedora 8 Update: clamav-0.92.1-3.fc8
2008-07-17 14:17:14
gentoo
gentoo
ClamAV: Multiple vulnerabilities
2008-05-20 00:00:00
suse
suse
remote code execution in clamav
2008-04-24 17:12:58
kitploit
kitploit
Radamsa - A General-Purpose Fuzzer
2024-03-25 11:30:00