|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Gentoo Local Security Checks >> [GLSA-200402-07] Clam Antivirus DoS vulnerability Vulnerability Assessment Details
|
[GLSA-200402-07] Clam Antivirus DoS vulnerability |
||
Clam Antivirus DoS vulnerability Detailed Explanation for this Vulnerability Assessment The remote host is affected by the vulnerability described in GLSA-200402-07 (Clam Antivirus DoS vulnerability) Oliver Eikemeier of Fillmore Labs discovered the overflow in Clam AV 0.65 when it handled malformed UUEncoded messages, causing the daemon to shut down. The problem originated in libclamav which calculates the line length of an uuencoded message by taking the ASCII value of the first character minus 64 while doing an assertion if the length is not in the permited range, effectively terminating the calling program as clamav would not be available. Impact A malformed message such as the one below would cause a denial of service, and depending on the server configuration this may impact other daemons relying on Clam AV in a fatal manner. To exploit the vulnerability, you can add the following to ~/clamtest.mbox: From - begin 644 byebye byebye end Then do "clamscan --mbox -v ~/clamtest.mbox" or "clamdscan -v ~/clamtest.mbox ps ax | grep clam": the former will cause an assertion and a segmentation fault, the latter would cause the daemon to shut down. Workaround There is no immediate workaround, a software upgrade is required. Solution: All users are urged to upgrade their Clam AV installations to Clam AV 0.67: # emerge sync # emerge -pv ">=net-mail/clamav-0.6.7" # emerge ">=net-mail/clamav-0.6.7" Network Security Threat Level: Medium Networks Security ID: Vulnerability Assessment Copyright: (C) 2005 Michel Arboi |
||
Cables, Connectors |
ASUS H110M-R Motherboard Intel 6th/7th Gen LGA1151 DDR4 Micro-ATX i/o shield
$42.00
***NEW*** BCM RX67Q mATX Gaming Motherboard Combo | Intel i5-3470 | 16GB DDR3
$49.77
Micro ATX Desktop Motherboard ASUS H110M-C LGA 1151
$31.95
ASUS Prime Z390-A LGA 1151 Intel Z390 SATA USB 3.1 ATX Motherboard NO I/O
$99.00
Gigabyte AMD B550 UD AC Gaming Motherboard - AMD B550 Chipset - AM4 Socket - AMD
$89.99
ASUS H110M-C LGA 1151 Micro ATX Motherboard 8GB RAM No CPU
$39.99
Asrock Z390 Phantom Gaming 4S/AC Wifi 8th/9th Gen Intel 1151 Motherboard Bulk
$47.35
LGA 2011 X79 Motherboard DDR3 RAM M.2 USB 2.0 USB 3.0 SATA 3.0 SATA 2.0 PS/2
$44.97
ASUS PRIME Z690-P WIFI D4 ATX Motherboard Intel LGA1700 DDR4 HDMI
$99.99
GIGABYTE MB10-Datto Motherboard Xeon D-1521- SR2DF 2.40 GHz- Open Box
$121.50
|
||
No Discussions have been posted on this vulnerability. |