Test ID:	1.3.6.1.4.1.25623.1.0.59656
Category:	Trustix Local Security Checks
Title:	Trustix Security Advisory TSLSA-2007-0020 (clamav)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory TSLSA-2007-0020. clamav < TSL 3.0.5 > < TSL 3.0 > < TSL 2.2 > - New Upstream. - Multiple Security Fixes. - Victor Stinner has reported a vulnerability in ClamAV, caused due to an error within the OLE2 parser when handling objects with malformed FAT partitions and large property sizes. This can be exploited to cause a DoS due to storage and CPU resource consumption by scanning a specially crafted OLE2 file. The Common Vulnerabilities and Exposures project has assigned the name CVE-2007-2650 to this issue. Solution: Update your system with the packages as indicated in the referenced security advisory. http://www.securityspace.com/smysecure/catid.html?in=TSLSA-2007-0020 Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2650 BugTraq ID: 24316 http://www.securityfocus.com/bid/24316 Debian Security Information: DSA-1320 (Google Search) http://www.debian.org/security/2007/dsa-1320 http://security.gentoo.org/glsa/glsa-200706-05.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:115 http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853 http://lurker.clamav.net/message/20070418.111144.0df6c5d3.en.html http://secunia.com/advisories/25244 http://secunia.com/advisories/25523 http://secunia.com/advisories/25525 http://secunia.com/advisories/25553 http://secunia.com/advisories/25558 http://secunia.com/advisories/25688 http://secunia.com/advisories/25796 SuSE Security Announcement: SUSE-SA:2007:033 (Google Search) http://www.novell.com/linux/security/advisories/2007_33_clamav.html http://www.trustix.org/errata/2007/0020/ http://www.vupen.com/english/advisories/2007/1776
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.