Test ID:	1.3.6.1.4.1.25623.1.0.57737
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1238-1)
Summary:	The remote host is missing an update for the Debian 'clamav' package(s) announced via the DSA-1238-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'clamav' package(s) announced via the DSA-1238-1 advisory. Vulnerability Insight: Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-6406 Hendrik Weimer discovered that invalid characters in base64 encoded data may lead to bypass of scanning mechanisms. CVE-2006-6481 Hendrik Weimer discovered that deeply nested multipart/mime MIME data may lead to denial of service. For the stable distribution (sarge) these problems have been fixed in version 0.84-2.sarge.13. For the upcoming stable distribution (etch) these problems have been fixed in version 0.88.7-1. For the unstable distribution (sid) these problems have been fixed in version 0.88.7-1. We recommend that you upgrade your clamav packages. Affected Software/OS: 'clamav' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6406 BugTraq ID: 21461 http://www.securityfocus.com/bid/21461 Bugtraq: 20061206 Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Google Search) http://www.securityfocus.com/archive/1/453654/100/0/threaded Debian Security Information: DSA-1238 (Google Search) http://www.debian.org/security/2006/dsa-1238 http://www.mandriva.com/security/advisories?name=MDKSA-2006:230 http://www.quantenblog.net/security/virus-scanner-bypass http://secunia.com/advisories/23362 http://secunia.com/advisories/23379 http://secunia.com/advisories/23411 http://secunia.com/advisories/23460 SuSE Security Announcement: SUSE-SA:2006:078 (Google Search) http://www.novell.com/linux/security/advisories/2006_78_clamav.html http://www.vupen.com/english/advisories/2006/4948 http://www.vupen.com/english/advisories/2006/5113 Common Vulnerability Exposure (CVE) ID: CVE-2006-6481 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html BugTraq ID: 21609 http://www.securityfocus.com/bid/21609 http://security.gentoo.org/glsa/glsa-200612-18.xml http://osvdb.org/31283 http://secunia.com/advisories/23347 http://secunia.com/advisories/23404 http://secunia.com/advisories/23417 http://secunia.com/advisories/29420 http://www.trustix.org/errata/2006/0072/ http://www.vupen.com/english/advisories/2008/0924/references
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.