PT-2007-7427 · Cisco · Clamav

Publicado 2007-12-31 · Atualizado 2024-06-15 · CVE-2007-6596

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ClamAV version 0.92

Description The issue allows remote attackers to bypass the scanner by using a Base64-UUEncoded file, as ClamAV 0.92 does not recognize Base64 UUEncoded archives.

Recommendations For ClamAV version 0.92, consider updating to a newer version that includes improved archive recognition to prevent bypassing the scanner.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-6596

OPENSUSE-SU-2024:10685-1

Produtos afetados

Clamav

Referências · 67

• https://suse.com/security/cve/CVE-2017-12374 · Nota
• https://suse.com/security/cve/CVE-2007-6335 · Nota
• https://suse.com/security/cve/CVE-2020-3341 · Nota
• https://suse.com/security/cve/CVE-2007-0897 · Nota
• https://suse.com/security/cve/CVE-2017-6419 · Nota
• https://suse.com/security/cve/CVE-2006-1989 · Nota
• https://suse.com/security/cve/CVE-2007-1997 · Nota
• http://securitytracker.com/id?1019148 · Nota
• https://suse.com/security/cve/CVE-2019-1798 · Nota
• https://suse.com/security/cve/CVE-2007-0898 · Nota
• https://suse.com/security/cve/CVE-2019-12900 · Nota
• https://suse.com/security/cve/CVE-2019-12625 · Nota
• http://securityreason.com/securityalert/3501 · Nota
• https://suse.com/security/cve/CVE-2019-15961 · Nota
• https://suse.com/security/cve/CVE-2008-2713 · Nota