exploits , vulnerabilities , articles , ClamAV CAB File Scan Evasion Vulnerability

Title	ClamAV CAB File Scan Evasion Vulnerability
Published	2009-06-18-12:00AM
Updated	2009-06-18-08:29PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	Thierry Zoller
Vulnerable	ifenslave ifenslave 0.88 Clam AntiVirus ClamAV 0.95.1 Clam AntiVirus ClamAV 0.94.2 Clam AntiVirus ClamAV 0.94.1 Clam AntiVirus ClamAV 0.93.3 Clam AntiVirus ClamAV 0.93.1 Clam AntiVirus ClamAV 0.92.1 Clam AntiVirus ClamAV 0.91.2 Clam AntiVirus ClamAV 0.91.1 Clam AntiVirus ClamAV 0.90.3 Clam AntiVirus ClamAV 0.90.2 Clam AntiVirus ClamAV 0.90.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia64 Debian Linux 4.0 ia32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Clam AntiVirus ClamAV 0.90 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 MandrakeSoft Linux Mandrake 2007.1 x86_64 MandrakeSoft Linux Mandrake 2007.1 MandrakeSoft Linux Mandrake 2007.0 x86_64 MandrakeSoft Linux Mandrake 2007.0 Clam AntiVirus ClamAV 0.88.5 Clam AntiVirus ClamAV 0.88.4 Clam AntiVirus ClamAV 0.88.3 Clam AntiVirus ClamAV 0.88.2 Clam AntiVirus ClamAV 0.88.1 Clam AntiVirus ClamAV 0.87.1 Clam AntiVirus ClamAV 0.87 1 Clam AntiVirus ClamAV 0.87 Clam AntiVirus ClamAV 0.86.2 Clam AntiVirus ClamAV 0.86 .1 Clam AntiVirus ClamAV 0.86 Clam AntiVirus ClamAV 0.85.1 Clam AntiVirus ClamAV 0.85 Clam AntiVirus ClamAV 0.84 rc2 Clam AntiVirus ClamAV 0.84 rc1 Clam AntiVirus ClamAV 0.84 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia64 Debian Linux 3.1 ia32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 alpha Debian Linux 3.1 Clam AntiVirus ClamAV 0.83 Clam AntiVirus ClamAV 0.82 Clam AntiVirus ClamAV 0.81 Gentoo Linux Clam AntiVirus ClamAV 0.80 rc4 Clam AntiVirus ClamAV 0.80 rc3 Clam AntiVirus ClamAV 0.80 rc2 Clam AntiVirus ClamAV 0.80 rc1 Clam AntiVirus ClamAV 0.80 Clam AntiVirus ClamAV 0.75.1 Clam AntiVirus ClamAV 0.70 Clam AntiVirus ClamAV 0.68 1 Clam AntiVirus ClamAV 0.68 Clam AntiVirus ClamAV 0.67 Gentoo Linux 1.4 _rc3 Gentoo Linux 1.4 _rc2 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.4 Clam AntiVirus ClamAV 0.65 Clam AntiVirus ClamAV 0.60 Clam AntiVirus ClamAV 0.54 Clam AntiVirus ClamAV 0.53 Clam AntiVirus ClamAV 0.52 Clam AntiVirus ClamAV 0.51 Clam AntiVirus ClamAV 0.95 Clam AntiVirus ClamAV 0.94 Clam AntiVirus ClamAV 0.93 Clam AntiVirus ClamAV 0.92 Clam AntiVirus ClamAV 0.91 Clam AntiVirus ClamAV 0.88.6 Clam AntiVirus ClamAV 0
Not Vulnerable	Clam Anti-Virus ClamAV 0.95.2
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 ReVou Comment Field HTML Injection Vulnerability
2009-12-18 Adobe Flash Media Server Resource Exhaustion Remote Denial of Service Vulnerability
2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities