PT-2006-7016 · Clam Antivirus · Clamav

Hendrik Weimer · Published 2006-12-10 · Updated 2018-10-17 · CVE-2006-6406

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Clam AntiVirus (ClamAV) version 0.88.6

Description The issue allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file. This can be demonstrated using the EICAR test file.

Recommendations For Clam AntiVirus (ClamAV) version 0.88.6, update to a newer version that includes a fix for this issue to prevent attackers from bypassing virus detection.

Exploit

Fix

Related Identifiers

CVE-2006-6406

DSA-1238-1

Affected Products

Clamav

References · 17

• 🔥 http://quantenblog.net/security/virus-scanner-bypass · Exploit
• http://novell.com/linux/security/advisories/2006_78_clamav.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-6406 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:230 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-6406 · Vendor Advisory
• http://debian.org/security/2006/dsa-1238 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-6406 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6406 · Security Note
• http://secunia.com/advisories/23411 · Note
• http://vupen.com/english/advisories/2006/4948 · Note
• http://secunia.com/advisories/23460 · Note
• http://vupen.com/english/advisories/2006/5113 · Note
• http://secunia.com/advisories/23362 · Note
• http://securityfocus.com/archive/1/453654/100/0/threaded · Note
• http://securityfocus.com/bid/21461 · Note