Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> SuSE Local Security Checks >> SUSE-SA:2006:078: clamav


Vulnerability Assessment Details

SUSE-SA:2006:078: clamav

Vulnerability Assessment Summary
Check for the version of the clamav package

Detailed Explanation for this Vulnerability Assessment

The remote host is missing the patch for the advisory SUSE-SA:2006:078 (clamav).


The anti virus scan engine ClamAV has been updated to version 0.88.7
to fix various security problems:

CVE-2006-5874: Clam AntiVirus (ClamAV) permits remote attackers to
cause a denial of service (crash) via a malformed base64-encoded MIME
attachment that triggers a null pointer dereference.

CVE-2006-6481: Clam AntiVirus (ClamAV) 0.88.6 permited remote attackers
to cause a denial of service (stack overflow and application crash)
by wrapping many layers of multipart/mixed content around a document,
a different vulnerability than CVE-2006-5874 and CVE-2006-6406.

CVE-2006-6406: Clam AntiVirus (ClamAV) 0.88.6 permited remote attackers
to bypass virus detection by inserting invalid characters into base64
encoded content in a multipart/mixed MIME file, as demonstrated with
the EICAR test file.


Solution : http://www.suse.de/security/http://www.novell.com/linux/security/advisories/2006_78_clamav.html
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2007 Tenable Network Security

Cables, Connectors


WD Ultrastar DC HC530 14TB SATA 3.5-Inch Enterprise HDD — WUH721414ALE604 picture

WD Ultrastar DC HC530 14TB SATA 3.5-Inch Enterprise HDD — WUH721414ALE604

$149.99



Lot of 10, 20 Seagate ST500LM021 7200RPM 500GB SATA 2.5

Lot of 10, 20 Seagate ST500LM021 7200RPM 500GB SATA 2.5" Thin Laptop Hard Drive

$479.50



Seagate ST12000NM0127 12TB SATA 6Gb/s 256MB 7200RPM 3.5

Seagate ST12000NM0127 12TB SATA 6Gb/s 256MB 7200RPM 3.5" Enterprise Hard Drive

$109.95



Western Digital 4TB Internal 7.2KRPM 3.5

Western Digital 4TB Internal 7.2KRPM 3.5" (WD4000FYYZ) SATA Hard Drive

$52.95



Seagate Exos X20 18TB 7200 SATA 6Gb/s 3.5

Seagate Exos X20 18TB 7200 SATA 6Gb/s 3.5" Enterprise Hard Drive - ST18000NM003D

$169.99



Seagate ST12000NM0127 12TB 256MB 7200RPM 3.5

Seagate ST12000NM0127 12TB 256MB 7200RPM 3.5" SATA 6.0Gb/s Enterprise Hard Drive

$89.99



HGST Ultrastar HUH728080ALE604 (0F23668) 8TB 7200RPM SATA 6Gb/s 3.5

HGST Ultrastar HUH728080ALE604 (0F23668) 8TB 7200RPM SATA 6Gb/s 3.5" Hard Drive

$64.99



1TB HDD/SSD 2.5

1TB HDD/SSD 2.5" SATA Hard Drive for Laptop with Win 10/Win 11 Pro Pre-installed

$14.77



1TB SATA 3.5

1TB SATA 3.5" Desktop Hard Drive With Windows 11 Pro 64 bit Installed

$28.74



Seagate BarraCuda 1TB Internal Hard Drive HDD (ST1000DM010) (USED) picture

Seagate BarraCuda 1TB Internal Hard Drive HDD (ST1000DM010) (USED)

$14.94



Discussions

No Discussions have been posted on this vulnerability.