Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.70898
Category:Ubuntu Local Security Checks
Title:Ubuntu USN-1179-1 (libclamav6)
Summary:NOSUMMARY
Description:Description:
The remote host is missing an update to libclamav6
announced via advisory USN-1179-1.

Details:

It was discovered that the hash processing code in libclamav improperly
handled messages with certain hashes. This could allow a remote attacker to
craft a document that could cause clamav to crash, resulting in a denial of
service.

Solution:
The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
libclamav6 0.97+dfsg-2ubuntu1.1

http://www.securityspace.com/smysecure/catid.html?in=USN-1179-1

CVSS Score:
5.0

CVSS Vector:
AV:L/AC:L/Au:NR/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2011-2721
1025858
http://securitytracker.com/id?1025858
45382
http://secunia.com/advisories/45382
46717
http://secunia.com/advisories/46717
48891
http://www.securityfocus.com/bid/48891
74181
http://www.osvdb.org/74181
FEDORA-2011-15033
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html
FEDORA-2011-15076
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html
FEDORA-2011-15119
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html
MDVSA-2011:122
http://www.mandriva.com/security/advisories?name=MDVSA-2011:122
USN-1179-1
http://www.ubuntu.com/usn/USN-1179-1
[oss-security] 20110726 CVE Request -- Clam AntiVirus -- v0.97.2 -- Off-by-one error by scanning message hashes
http://www.openwall.com/lists/oss-security/2011/07/26/3
[oss-security] 20110726 Re: CVE Request -- Clam AntiVirus -- v0.97.2 -- Off-by-one error by scanning message hashes
http://www.openwall.com/lists/oss-security/2011/07/26/13
clamav-scan-dos(68785)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68785
http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.97.2
http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=4842733eb3f09be61caeed83778bb6679141dbc5
https://bugzilla.novell.com/show_bug.cgi?id=708263
https://bugzilla.redhat.com/show_bug.cgi?id=725694
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2818
CopyrightCopyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.