PT-2003-1967 · Clam · Clam Antivirus

Kf · Published 2003-11-18 · Updated 2016-10-18 · CVE-2003-0946

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Clam AntiVirus versions 0.60 through 0.60p Clam AntiVirus versions prior to 0.65

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command.

Recommendations For Clam AntiVirus versions 0.60 through 0.60p, update to version 0.65 or later. For Clam AntiVirus versions prior to 0.65, update to version 0.65 or later.

Fix

Related Identifiers

CVE-2003-0946

Affected Products

Clam Antivirus

References · 6

• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0946 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=197038 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0946 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0946 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0946 · Security Note
• http://marc.info/?l=bugtraq&m=106867135830683&w=2 · Note