exploits , vulnerabilities , articles , ClamAV Embedded Archive File Scan Evasion Vulnerability

Title	ClamAV Embedded Archive File Scan Evasion Vulnerability
Published	2009-06-16-12:00AM
Updated	2009-07-24-09:36AM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	Thierry Zoller
Vulnerable	Pardus Linux 2009 0 Pardus Linux 2008 0 ifenslave ifenslave 0.88 Clam AntiVirus ClamAV 0.95.1 Clam AntiVirus ClamAV 0.94.2 Clam AntiVirus ClamAV 0.94.1 Clam AntiVirus ClamAV 0.93.3 Clam AntiVirus ClamAV 0.93.1 Clam AntiVirus ClamAV 0.92.1 Clam AntiVirus ClamAV 0.91.2 Clam AntiVirus ClamAV 0.91.1 Clam AntiVirus ClamAV 0.90.3 Clam AntiVirus ClamAV 0.90.2 Clam AntiVirus ClamAV 0.90.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia64 Debian Linux 4.0 ia32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Clam AntiVirus ClamAV 0.90 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 MandrakeSoft Linux Mandrake 2007.1 x86_64 MandrakeSoft Linux Mandrake 2007.1 MandrakeSoft Linux Mandrake 2007.0 x86_64 MandrakeSoft Linux Mandrake 2007.0 Clam AntiVirus ClamAV 0.88.5 Clam AntiVirus ClamAV 0.88.4 Clam AntiVirus ClamAV 0.88.3 Clam AntiVirus ClamAV 0.88.2 Clam AntiVirus ClamAV 0.88.1 Clam AntiVirus ClamAV 0.87.1 Clam AntiVirus ClamAV 0.87 1 Clam AntiVirus ClamAV 0.87 Clam AntiVirus ClamAV 0.86.2 Clam AntiVirus ClamAV 0.86 .1 Clam AntiVirus ClamAV 0.86 Clam AntiVirus ClamAV 0.85.1 Clam AntiVirus ClamAV 0.85 Clam AntiVirus ClamAV 0.84 rc2 Clam AntiVirus ClamAV 0.84 rc1 Clam AntiVirus ClamAV 0.84 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia64 Debian Linux 3.1 ia32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 alpha Debian Linux 3.1 Clam AntiVirus ClamAV 0.83 Clam AntiVirus ClamAV 0.82 Clam AntiVirus ClamAV 0.81 Gentoo Linux Clam AntiVirus ClamAV 0.80 rc4 Clam AntiVirus ClamAV 0.80 rc3 Clam AntiVirus ClamAV 0.80 rc2 Clam AntiVirus ClamAV 0.80 rc1 Clam AntiVirus ClamAV 0.80 Clam AntiVirus ClamAV 0.75.1 Clam AntiVirus ClamAV 0.70 Clam AntiVirus ClamAV 0.68 1 Clam AntiVirus ClamAV 0.68 Clam AntiVirus ClamAV 0.67 Gentoo Linux 1.4 _rc3 Gentoo Linux 1.4 _rc2 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.4 Clam AntiVirus ClamAV 0.65 Clam AntiVirus ClamAV 0.60 Clam AntiVirus ClamAV 0.54 Clam AntiVirus ClamAV 0.53 Clam AntiVirus ClamAV 0.52 Clam AntiVirus ClamAV 0.51 Clam AntiVirus ClamAV 0.95 Clam AntiVirus ClamAV 0.94 Clam AntiVirus ClamAV 0.93 Clam AntiVirus ClamAV 0.92 Clam AntiVirus ClamAV 0.91 Clam AntiVirus ClamAV 0.88.6
Not Vulnerable	Clam Anti-Virus ClamAV 0.95.2
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-07 FFmpeg TCP/UDP Memory Leak Denial Of ServiceVulnerability
2009-12-04 Achievo Document Types Section Arbitrary File Upload Vulnerability
2009-12-04 Achievo Scheduler Category HTML Injection Vulnerability
2009-12-04 Yoast Google Analytics for WordPress Plugin 404 Error Page Cross Site Scripting Vulnerability
2009-12-04 DevIL DICOM File Handling Remote Buffer Overflow Vulnerability
2009-12-04 Invision Power Board Local File Include and SQL Injection Vulnerabilities
2009-12-04 Mozilla Firefox Yoono Extension DOM Event Handler Cross Domain Scripting Vulnerability
2009-12-04 UBB.threads Multiple File Include Vulnerabilities
2009-12-04 Expat Unspecified XML Parsing Remote Denial of Service Vulnerability
2009-12-04 Apple Mac OS X Java Applet Certificate Validation Security Bypass Vulnerability