PT-2007-4318 · Cisco · Clamav

Publicado 2007-06-07 · Atualizado 2008-09-05 · CVE-2007-3025

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: ClamAV versions prior to 0.90.3 ClamAV version 0.91 before 0.91rc1

Description: The issue is related to an unspecified vulnerability in the phishcheck.c file of the libclamav component. It affects systems running on Solaris and can be exploited by remote attackers to cause a denial of service, resulting in the system hanging. The vulnerability is connected to the isURL function and regular expressions.

Recommendations: For ClamAV versions prior to 0.90.3, update to version 0.90.3 or later. For ClamAV version 0.91 before 0.91rc1, update to version 0.91rc1 or later.

Correção

Identificadores relacionados

CVE-2007-3025

Produtos afetados

Clamav

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3025 · Nota de Segurança
• http://secunia.com/advisories/25525 · Nota
• http://kolab.org/security/kolab-vendor-notice-15.txt · Aviso do Fabricante
• http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html · Correção