Skip to Content.
Sympa Menu

sm-security - [SM-Security] [SMGLSA-2005:1] clamav: Multiple vulnerabilities

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] [SMGLSA-2005:1] clamav: Multiple vulnerabilities
  • Date: Mon, 5 Dec 2005 02:15:21 +0100

Synopsis
========
clamav has many security flaws which make it vulnerable to remote
execution of arbitrary code and a Denial of Service.

Background
==========
Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of
this software is the integration with mail servers (attachment
scanning). The package provides a flexible and scalable multi-threaded
daemon, a commandline scanner, and a tool for automatic updating via
Internet.

Description
===========
From Clam AntiVirus 0.87.1 Release Notes :

- libclamav/petite.c: fix boundary checks (acab)
- libclamav/mbox.c: scan attachments that have no filename (njh)
- libclamav/fsg.c: fix buffer size calculation in unfsg_133.
Reported by Zero Day Initiative (ZDI-CAN-004)
- libclamav/tnef.c: fix possible infinite loop
Reported by iDEFENSE (IDEF1169).
- libclamav/mspack/cabd.c: fix possible infinite loop in cabd_find (tk)
Reported by iDEFENSE (IDEF1180).
- clamd/others.c: fix compilation error on Cobalt Qube 1 (tk)
- clamd: properly handle ReadTimeout in SESSION (tk)
Bug reported by Kamil Kaczkowski <kamil*kamil.eisp.pl>
- libclamav/others.c,h: Add generic bitset implementation (trog)
- libclamav/ole2_extract.c: Make sure the property tree doesn't loop
(trog) Fixes CAN-2005-3239. Installations with default settings were not
affected by this bug.

Impact
======
By sending a malicious attachment to a mail server that is hooked with
clamav, a remote attacker could cause a Denial of Service or the
execution of arbitrary code.

Workaround
==========
There are no known workarounds at this time.

Affected packages
=================
This is now fixed in all grimoires.

Resolution
==========
All clamav users should upgrade to the latest available version:
# scribe update
# cast -c clamav

References
==========
[ 1 ] Clam AntiVirus 0.87.1: Release Notes
http://sourceforge.net/project/shownotes.php?release_id=368319
[ 2 ] GLSA 200511-04
http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml

--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: PGP signature



  • [SM-Security] [SMGLSA-2005:1] clamav: Multiple vulnerabilities, Thomas Houssin, 12/04/2005

Archive powered by MHonArc 2.6.24.

Top of Page