Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> SuSE Local Security Checks >> SUSE-SA:2006:078: clamav


Vulnerability Assessment Details

SUSE-SA:2006:078: clamav

Vulnerability Assessment Summary
Check for the version of the clamav package

Detailed Explanation for this Vulnerability Assessment

The remote host is missing the patch for the advisory SUSE-SA:2006:078 (clamav).


The anti virus scan engine ClamAV has been updated to version 0.88.7
to fix various security problems:

CVE-2006-5874: Clam AntiVirus (ClamAV) permits remote attackers to
cause a denial of service (crash) via a malformed base64-encoded MIME
attachment that triggers a null pointer dereference.

CVE-2006-6481: Clam AntiVirus (ClamAV) 0.88.6 permited remote attackers
to cause a denial of service (stack overflow and application crash)
by wrapping many layers of multipart/mixed content around a document,
a different vulnerability than CVE-2006-5874 and CVE-2006-6406.

CVE-2006-6406: Clam AntiVirus (ClamAV) 0.88.6 permited remote attackers
to bypass virus detection by inserting invalid characters into base64
encoded content in a multipart/mixed MIME file, as demonstrated with
the EICAR test file.


Solution : http://www.suse.de/security/http://www.novell.com/linux/security/advisories/2006_78_clamav.html
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2007 Tenable Network Security

Cables, Connectors


WD 4TB Purple Surveillance Hard Drive WD43PURZ 3.5” SATA 6Gb/s Sealed New HDD picture

WD 4TB Purple Surveillance Hard Drive WD43PURZ 3.5” SATA 6Gb/s Sealed New HDD

$39.99



Hitachi Ultrastar HUA723030ALA640 3TB 7200 RPM 64MB SATA 3.0Gb/s 3.5

Hitachi Ultrastar HUA723030ALA640 3TB 7200 RPM 64MB SATA 3.0Gb/s 3.5" Hard Drive

$49.49



HGST 0F27438 10TB SAS 12Gbps 7200RPM 3.5

HGST 0F27438 10TB SAS 12Gbps 7200RPM 3.5" HDD | HUH721010AL4204 | Grade A

$94.49



Seagate ST6000NM0014 6TB 12Gb/s SAS 7.2K 3.5

Seagate ST6000NM0014 6TB 12Gb/s SAS 7.2K 3.5" HDD

$29.24



HGST 4TB SAS Hard Drive 3.5

HGST 4TB SAS Hard Drive 3.5" HUS724040ALS640-NOT FOR DESKTOPS

$24.99



Seagate IronWolf 12TB 7200RPM SATA 6Gb/s 256MB 3.5

Seagate IronWolf 12TB 7200RPM SATA 6Gb/s 256MB 3.5" NAS Hard Drive ST12000VN0007

$139.99



Western Digital WD Blue WD5000AZLX 500 GB 3.5

Western Digital WD Blue WD5000AZLX 500 GB 3.5" SATA III Hard Drive

$9.99



Western Digital 1TB 3.5

Western Digital 1TB 3.5" SATA III 7200RPM Desktop Hard Drive

$18.99



Lot of 10 Dell 1.8TB GP3FR 12Gb/s 2.5

Lot of 10 Dell 1.8TB GP3FR 12Gb/s 2.5" SAS Server Hard Drive

$208.99



1TB HDD/SSD 2.5

1TB HDD/SSD 2.5" SATA Hard Drive for Laptop with Win 10/Win 11 Pro Pre-installed

$22.99



Discussions

No Discussions have been posted on this vulnerability.