ID de Prueba:	1.3.6.1.4.1.25623.1.0.55066
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLA-2005:973 (clamav)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLA-2005:973. The installed version of clamav is not compatible with the online update database format, and is vulnerable to the following vulnerabilities: 1. CVE-2005-1922 A remote attacker could cause a denial of service situation by a specially crafted file that causes repeated errors in the cli_msexpand() function. 2. CVE-2005-1923 A remote attacker could also trigger a denial of service situation via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read. 3. CVE-2005-2056 The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a specially crafted Quantum archive. 4. CVE-2005-2070 The ClamAV Mail FILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading. Solution: Upgrade your software. http://www.clamav.net http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000973 Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1922 Debian Security Information: DSA-737 (Google Search) http://www.debian.org/security/2005/dsa-737 http://www.idefense.com/application/poi/display?id=276&type=vulnerabilities&flashstatus=true Common Vulnerability Exposure (CVE) ID: CVE-2005-1923 http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities Common Vulnerability Exposure (CVE) ID: CVE-2005-2056 BugTraq ID: 14058 http://www.securityfocus.com/bid/14058 http://www.gentoo.org/security/en/glsa/glsa-200506-23.xml http://secunia.com/advisories/15811 SuSE Security Announcement: SUSE-SA:2005:038 (Google Search) http://www.novell.com/linux/security/advisories/2005_38_clamav.html Common Vulnerability Exposure (CVE) ID: CVE-2005-2070 BugTraq ID: 14047 http://www.securityfocus.com/bid/14047 Bugtraq: 20050623 long sendmail timeouts let attacker prevent milter quiesce (Google Search) http://seclists.org/lists/bugtraq/2005/Jun/0197.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.