Test ID:	1.3.6.1.4.1.25623.1.0.55066
Category:	Conectiva Local Security Checks
Title:	Conectiva Security Advisory CLA-2005:973 (clamav)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory CLA-2005:973. The installed version of clamav is not compatible with the online update database format, and is vulnerable to the following vulnerabilities: 1. CVE-2005-1922 A remote attacker could cause a denial of service situation by a specially crafted file that causes repeated errors in the cli_msexpand() function. 2. CVE-2005-1923 A remote attacker could also trigger a denial of service situation via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read. 3. CVE-2005-2056 The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a specially crafted Quantum archive. 4. CVE-2005-2070 The ClamAV Mail FILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading. Solution: Upgrade your software. http://www.clamav.net http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000973 Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1922 Debian Security Information: DSA-737 (Google Search) http://www.debian.org/security/2005/dsa-737 http://www.idefense.com/application/poi/display?id=276&type=vulnerabilities&flashstatus=true Common Vulnerability Exposure (CVE) ID: CVE-2005-1923 http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities Common Vulnerability Exposure (CVE) ID: CVE-2005-2056 BugTraq ID: 14058 http://www.securityfocus.com/bid/14058 http://www.gentoo.org/security/en/glsa/glsa-200506-23.xml http://secunia.com/advisories/15811 SuSE Security Announcement: SUSE-SA:2005:038 (Google Search) http://www.novell.com/linux/security/advisories/2005_38_clamav.html Common Vulnerability Exposure (CVE) ID: CVE-2005-2070 BugTraq ID: 14047 http://www.securityfocus.com/bid/14047 Bugtraq: 20050623 long sendmail timeouts let attacker prevent milter quiesce (Google Search) http://seclists.org/lists/bugtraq/2005/Jun/0197.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.