Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.57863
Kategorie:Gentoo Local Security Checks
Titel:Gentoo Security Advisory GLSA 200608-13 (clamav)
Zusammenfassung:The remote host is missing updates announced in;advisory GLSA 200608-13.
Beschreibung:Summary:
The remote host is missing updates announced in
advisory GLSA 200608-13.

Vulnerability Insight:
ClamAV is vulnerable to a heap-based buffer overflow resulting in a Denial
of Service and potentially remote execution of arbitrary code.

Solution:
All ClamAV users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=app-antivirus/clamav-0.88.4'

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2006-4018
BugTraq ID: 19381
http://www.securityfocus.com/bid/19381
Bugtraq: 20060809 [Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (Google Search)
http://www.securityfocus.com/archive/1/442681/100/0/threaded
Debian Security Information: DSA-1153 (Google Search)
http://www.debian.org/security/2006/dsa-1153
http://security.gentoo.org/glsa/glsa-200608-13.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:138
http://www.overflow.pl/adv/clamav_upx_heap.txt
http://securitytracker.com/id?1016645
http://secunia.com/advisories/21368
http://secunia.com/advisories/21374
http://secunia.com/advisories/21433
http://secunia.com/advisories/21443
http://secunia.com/advisories/21457
http://secunia.com/advisories/21497
http://secunia.com/advisories/21562
SuSE Security Announcement: SUSE-SA:2006:046 (Google Search)
http://www.novell.com/linux/security/advisories/2006_46_clamav.html
http://www.trustix.org/errata/2006/0046/
http://www.vupen.com/english/advisories/2006/3175
http://www.vupen.com/english/advisories/2006/3275
XForce ISS Database: clamav-pefromupx-bo(28286)
https://exchange.xforce.ibmcloud.com/vulnerabilities/28286
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.