PT-2006-2973 · Cisco · Clamav

Ryan Giobbi · Publicado 2006-05-01 · Atualizado 2024-06-15 · CVE-2006-1989

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions 0.80 through 0.88.1

Description A buffer overflow issue exists in the get database function within the HTTP client of Freshclam, potentially allowing remote web servers to execute arbitrary code by sending long HTTP headers.

Recommendations For ClamAV versions 0.80 through 0.88.1, update to a version that contains a fix for this issue to prevent potential code execution by remote web servers.

Exploit

Correção

Identificadores relacionados

CVE-2006-1989

DSA-1050-1

OPENSUSE-SU-2024:10685-1

Produtos afetados

Clamav

Referências · 84

• 🔥 http://secunia.com/advisories/19880 · Exploit
• 🔥 http://clamav.net/security/0.88.2.html · Exploit
• https://suse.com/security/cve/CVE-2017-12374 · Nota
• http://securityfocus.com/bid/17754 · Correção
• https://suse.com/security/cve/CVE-2007-0897 · Nota
• https://suse.com/security/cve/CVE-2017-6419 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1989 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2007-1997 · Nota
• https://suse.com/security/cve/CVE-2007-0898 · Nota
• https://suse.com/security/cve/CVE-2008-2713 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:080 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-4182 · Nota
• http://vupen.com/english/advisories/2006/2566 · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-1989 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-12377 · Nota