The remote host is missing an update to clamav announced via advisory MDKSA-2006:080.
Ulf Harnhammar discovered that the freshclam tool does not do a proper check for the size of header data received from a web server. This could potentially allow a specially prepared HTTP server to exploit freshclam clients connecting to a database mirror and causing a DoS.
The updated packages have been updated to Clamav 0.88.2 which corrects this problem.
Affected: 10.2, 2006.0, Corporate 3.0
Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.