PT-2006-7016 · Clam Antivirus · Clamav

Hendrik Weimer · Publicado 2006-12-10 · Atualizado 2018-10-17 · CVE-2006-6406

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Clam AntiVirus (ClamAV) version 0.88.6

Description The issue allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file. This can be demonstrated using the EICAR test file.

Recommendations For Clam AntiVirus (ClamAV) version 0.88.6, update to a newer version that includes a fix for this issue to prevent attackers from bypassing virus detection.

Exploit

Correção

Identificadores relacionados

CVE-2006-6406

DSA-1238-1

Produtos afetados

Clamav

Referências · 17

• 🔥 http://quantenblog.net/security/virus-scanner-bypass · Exploit
• http://novell.com/linux/security/advisories/2006_78_clamav.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-6406 · Aviso do Fabricante
• http://secunia.com/advisories/23411 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:230 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/4948 · Nota
• https://osv.dev/vulnerability/CVE-2006-6406 · Aviso do Fabricante
• http://secunia.com/advisories/23460 · Nota
• http://debian.org/security/2006/dsa-1238 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/5113 · Nota
• http://secunia.com/advisories/23362 · Nota
• http://securityfocus.com/archive/1/453654/100/0/threaded · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-6406 · Aviso do Fabricante
• http://securityfocus.com/bid/21461 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6406 · Nota de Segurança