Test ID:	1.3.6.1.4.1.25623.1.0.55089
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-776-1)
Summary:	The remote host is missing an update for the Debian 'clamav' package(s) announced via the DSA-776-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'clamav' package(s) announced via the DSA-776-1 advisory. Vulnerability Insight: Several bugs were discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified: CAN-2005-2450 Neel Mehta and Alex Wheeler discovered that Clam AntiVirus is vulnerable to integer overflows when handling the TNEF, CHM and FSG file formats. CVE-NOMATCH Mark Pizzolato fixed a possible infinite loop that could cause a denial of service. The old stable distribution (woody) is not affected as it doesn't contain clamav. For the stable distribution (sarge) these problems have been fixed in version 0.84-2.sarge.2. For the unstable distribution (sid) these problems have been fixed in version 0.86.2-1. We recommend that you upgrade your clamav package. Affected Software/OS: 'clamav' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2450 BugTraq ID: 14359 http://www.securityfocus.com/bid/14359 Bugtraq: 20050725 ClamAV Multiple Rem0te Buffer Overflows (Google Search) http://marc.info/?l=bugtraq&m=112230864412932&w=2 Conectiva Linux advisory: CLSA-2005:987 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987 http://security.gentoo.org/glsa/glsa-200507-25.xml http://www.osvdb.org/18257 http://www.osvdb.org/18258 http://www.osvdb.org/18259 http://secunia.com/advisories/16180 http://secunia.com/advisories/16229 http://secunia.com/advisories/16250 http://secunia.com/advisories/16296 http://secunia.com/advisories/16458 SuSE Security Announcement: SUSE-SR:2005:018 (Google Search) http://www.novell.com/linux/security/advisories/2005_18_sr.html XForce ISS Database: clam-antivirus-file-format-gain-access(21555) https://exchange.xforce.ibmcloud.com/vulnerabilities/21555
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.