PT-2007-7426 · Cisco · Clamav

Publicado 2007-12-31 · Atualizado 2024-06-15 · CVE-2007-6595

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ClamAV version 0.92

Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files or .ascii files when utf16-decode is enabled. This can be achieved by exploiting the cli gentempfd function in libclamav/others.c or the sigtool.

Recommendations For ClamAV version 0.92, consider disabling the utf16-decode option to minimize the risk of exploitation. Additionally, restrict access to the cli gentempfd function and sigtool to prevent potential attacks.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2007-6595

DSA-1497-1

OPENSUSE-SU-2024:10685-1

Produtos afetados

Clamav

Referências · 75

• https://suse.com/security/cve/CVE-2017-12374 · Nota
• https://suse.com/security/cve/CVE-2007-6335 · Nota
• https://suse.com/security/cve/CVE-2020-3341 · Nota
• https://suse.com/security/cve/CVE-2007-0897 · Nota
• https://suse.com/security/cve/CVE-2017-6419 · Nota
• https://suse.com/security/cve/CVE-2006-1989 · Nota
• http://secunia.com/advisories/28949 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2007-1997 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39335 · Nota
• https://suse.com/security/cve/CVE-2019-1798 · Nota
• https://suse.com/security/cve/CVE-2007-0898 · Nota
• https://suse.com/security/cve/CVE-2019-12900 · Nota
• https://suse.com/security/cve/CVE-2019-12625 · Nota
• http://securityreason.com/securityalert/3501 · Nota
• https://suse.com/security/cve/CVE-2019-15961 · Nota