Clam Anti-Virus ClamAV Cabinet File Parsing Remote Denial Of Service Vulnerability

Bugtraq ID:	14089
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-1923
Remote:	Yes
Local:	No
Published:	Jun 29 2005 12:00AM
Updated:	Jul 12 2009 04:06PM
Credit:	Discovery is credited to an anonymous source.
Vulnerable:	Trustix Secure Linux 2.2 Trustix Secure Linux 2.1 Trustix Secure Linux 1.5 Trustix Secure Enterprise Linux 2.0 SuSE Linux 8.1 SuSE Linux 8.0 i386 SuSE Linux 8.0 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Clam Anti-Virus ClamAV 0.85.1 Clam Anti-Virus ClamAV 0.85 Clam Anti-Virus ClamAV 0.84 rc2 Clam Anti-Virus ClamAV 0.84 rc1 Clam Anti-Virus ClamAV 0.84 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 Clam Anti-Virus ClamAV 0.83 Clam Anti-Virus ClamAV 0.82 Clam Anti-Virus ClamAV 0.81 + Gentoo Linux Clam Anti-Virus ClamAV 0.80 rc4 Clam Anti-Virus ClamAV 0.80 rc3 Clam Anti-Virus ClamAV 0.80 rc2 Clam Anti-Virus ClamAV 0.80 rc1 Clam Anti-Virus ClamAV 0.80 Clam Anti-Virus ClamAV 0.70 Clam Anti-Virus ClamAV 0.68 -1 Clam Anti-Virus ClamAV 0.68 Clam Anti-Virus ClamAV 0.67 + Gentoo Linux 1.4 _rc3 + Gentoo Linux 1.4 _rc2 + Gentoo Linux 1.4 _rc1 + Gentoo Linux 1.4 Clam Anti-Virus ClamAV 0.65 Clam Anti-Virus ClamAV 0.60 Clam Anti-Virus ClamAV 0.54 Clam Anti-Virus ClamAV 0.53 Clam Anti-Virus ClamAV 0.52 Clam Anti-Virus ClamAV 0.51 ALT Linux ALT Linux Junior 2.3 ALT Linux ALT Linux Compact 2.3
Not Vulnerable:	Clam Anti-Virus ClamAV 0.86 .1 Clam Anti-Virus ClamAV 0.86 Clam Anti-Virus ClamAV 0.81 + Gentoo Linux

Clam Anti-Virus ClamAV Cabinet File Parsing Remote Denial Of Service Vulnerability

A remote denial of service vulnerability affects ClamAV. This issue is due to a failure of the application to properly handle malicious Cab file content.

An attacker may leverage this issue to crash the Clam Anti-Virus daemon, potentially leaving an affected computer open to infection by malicious code.

Clam Anti-Virus ClamAV Cabinet File Parsing Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Clam Anti-Virus ClamAV Cabinet File Parsing Remote Denial Of Service Vulnerability

Solution:
The vendor has released an upgrade dealing with this issue.

Debian has released advisory DSA 737-1 to address various issues affecting clamav. Please see the referenced advisory for more information.

Conectiva Linux has released security announcement CLSA-2005:973 addressing this issue. Please see the referenced advisory for details on obtaining abd applying the appropriate updates.

Debian has released security advisory DSA 773-1 addressing several issues for their AMD64 port of the operating system. Please see the referenced advisory for further information.


Clam Anti-Virus ClamAV 0.51

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.52

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.53

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.54

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.60

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.65

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.67

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d


• SuSE clamav-0.80-2.5.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/clamav-0.80-2.5.i 586.rpm


• SuSE clamav-0.80-2.5.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/clamav-0.80-2 .5.x86_64.rpm

Clam Anti-Virus ClamAV 0.68

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.68 -1

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.70

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d


• Mandrake clamav-0.81-0.2.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-0.81-0.2.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-0.81-0.2.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-0.81-0.2.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-db-0.81-0.2.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-db-0.81-0.2.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-db-0.81-0.2.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-db-0.81-0.2.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-milter-0.81-0.2.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-milter-0.81-0.2.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-milter-0.81-0.2.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake clamav-milter-0.81-0.2.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64clamav1-0.81-0.2.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64clamav1-0.81-0.2.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64clamav1-devel-0.81-0.2.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64clamav1-devel-0.81-0.2.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libclamav1-0.81-0.2.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libclamav1-0.81-0.2.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libclamav1-devel-0.81-0.2.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libclamav1-devel-0.81-0.2.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php

Clam Anti-Virus ClamAV 0.80 rc4

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d


• Trustix clamav-0.80-3tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix clamav-devel-0.80-3tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/

Clam Anti-Virus ClamAV 0.80 rc3

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d


• Conectiva clamav-0.83-70136U10_7cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-0.83-70136U10_7cl.i 386.rpm


• Conectiva clamav-database-0.83.20041125-70136U10_7cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-database-0.83.20041 125-70136U10_7cl.i386.rpm


• Conectiva libclamav-devel-0.83-70136U10_7cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-0.83-70136 U10_7cl.i386.rpm


• Conectiva libclamav-devel-static-0.83-70136U10_7cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-static-0.8 3-70136U10_7cl.i386.rpm


• Conectiva libclamav1-0.83-70136U10_7cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav1-0.83-70136U10_7 cl.i386.rpm


• SuSE clamav-0.80-2.3.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/clamav-0.80-2.3.i 586.rpm


• SuSE clamav-0.80-2.3.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/clamav-0.80-2 .3.x86_64.rpm

Clam Anti-Virus ClamAV 0.80 rc1

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80 rc2

• Clam Anti-Virus ClamAV 0.81
  http://sourceforge.net/project/showfiles.php?group_id=86638&release_id =300116


• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.81

• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.82

• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.83

• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.84

• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d


• Debian clamav-base_0.84-2.sarge.1_all.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.84 -2.sarge.1_all.deb


• Debian clamav-daemon_0.84-2.sarge.1_alpha.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_alpha.deb


• Debian clamav-daemon_0.84-2.sarge.1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_amd64.deb


• Debian clamav-daemon_0.84-2.sarge.1_arm.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_arm.deb


• Debian clamav-daemon_0.84-2.sarge.1_hppa.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_hppa.deb


• Debian clamav-daemon_0.84-2.sarge.1_i386.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_i386.deb


• Debian clamav-daemon_0.84-2.sarge.1_ia64.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_ia64.deb


• Debian clamav-daemon_0.84-2.sarge.1_m68k.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_m68k.deb


• Debian clamav-daemon_0.84-2.sarge.1_mips.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_mips.deb


• Debian clamav-daemon_0.84-2.sarge.1_mipsel.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_mipsel.deb


• Debian clamav-daemon_0.84-2.sarge.1_powerpc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_powerpc.deb


• Debian clamav-daemon_0.84-2.sarge.1_s390.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_s390.deb


• Debian clamav-daemon_0.84-2.sarge.1_sparc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_sparc.deb


• Debian clamav-docs_0.84-2.sarge.1_all.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.84 -2.sarge.1_all.deb


• Debian clamav-freshclam_0.84-2.sarge.1_alpha.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_alpha.deb


• Debian clamav-freshclam_0.84-2.sarge.1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_amd64.deb


• Debian clamav-freshclam_0.84-2.sarge.1_arm.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_arm.deb


• Debian clamav-freshclam_0.84-2.sarge.1_hppa.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_hppa.deb


• Debian clamav-freshclam_0.84-2.sarge.1_i386.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_i386.deb


• Debian clamav-freshclam_0.84-2.sarge.1_ia64.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_ia64.deb


• Debian clamav-freshclam_0.84-2.sarge.1_m68k.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_m68k.deb


• Debian clamav-freshclam_0.84-2.sarge.1_mips.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_mips.deb


• Debian clamav-freshclam_0.84-2.sarge.1_powerpc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_powerpc.deb


• Debian clamav-freshclam_0.84-2.sarge.1_s390.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_s390.deb


• Debian clamav-freshclam_0.84-2.sarge.1_sparc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_sparc.deb


• Debian clamav-milter_0.84-2.sarge.1_alpha.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_alpha.deb


• Debian clamav-milter_0.84-2.sarge.1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_amd64.deb


• Debian clamav-milter_0.84-2.sarge.1_arm.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_arm.deb


• Debian clamav-milter_0.84-2.sarge.1_hppa.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_hppa.deb


• Debian clamav-milter_0.84-2.sarge.1_i386.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_i386.deb


• Debian clamav-milter_0.84-2.sarge.1_ia64.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_ia64.deb


• Debian clamav-milter_0.84-2.sarge.1_m68k.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_m68k.deb


• Debian clamav-milter_0.84-2.sarge.1_mips.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_mips.deb


• Debian clamav-milter_0.84-2.sarge.1_mipsel.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_mipsel.deb


• Debian clamav-milter_0.84-2.sarge.1_powerpc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_powerpc.deb


• Debian clamav-milter_0.84-2.sarge.1_s390.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_s390.deb


• Debian clamav-milter_0.84-2.sarge.1_sparc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_sparc.deb


• Debian clamav-testfiles_0.84-2.sarge.1_all.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.84-2.sarge.1_all.deb


• Debian clamav/libclamav1_0.84-2.sarge.1_alpha.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_alpha.deb


• Debian clamav/libclamav1_0.84-2.sarge.1_mips.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_mips.deb


• Debian clamav_0.84-2.sarge.1_alpha.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_alpha.deb


• Debian clamav_0.84-2.sarge.1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_amd64.deb


• Debian clamav_0.84-2.sarge.1_arm.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_arm.deb


• Debian clamav_0.84-2.sarge.1_hppa.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_hppa.deb


• Debian clamav_0.84-2.sarge.1_i386.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_i386.deb


• Debian clamav_0.84-2.sarge.1_ia64.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_ia64.deb


• Debian clamav_0.84-2.sarge.1_m68k.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_m68k.deb


• Debian clamav_0.84-2.sarge.1_mips.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_mips.deb


• Debian clamav_0.84-2.sarge.1_mipsel.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_mipsel.deb


• Debian clamav_0.84-2.sarge.1_powerpc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_powerpc.deb


• Debian clamav_0.84-2.sarge.1_s390.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_s390.deb


• Debian clamav_0.84-2.sarge.1_sparc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_sparc.deb


• Debian libclamav-dev_0.84-2.sarge.1_alpha.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_alpha.deb


• Debian libclamav-dev_0.84-2.sarge.1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_amd64.deb


• Debian libclamav-dev_0.84-2.sarge.1_arm.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_arm.deb


• Debian libclamav-dev_0.84-2.sarge.1_hppa.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_hppa.deb


• Debian libclamav-dev_0.84-2.sarge.1_i386.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_i386.deb


• Debian libclamav-dev_0.84-2.sarge.1_ia64.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_ia64.deb


• Debian libclamav-dev_0.84-2.sarge.1_m68k.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_m68k.deb


• Debian libclamav-dev_0.84-2.sarge.1_mipsel.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_mipsel.deb


• Debian libclamav-dev_0.84-2.sarge.1_powerpc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_powerpc.deb


• Debian libclamav-dev_0.84-2.sarge.1_s390.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_s390.deb


• Debian libclamav-dev_0.84-2.sarge.1_sparc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_sparc.deb


• Debian libclamav1_0.84-2.sarge.1_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_amd64.deb


• Debian libclamav1_0.84-2.sarge.1_arm.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_arm.deb


• Debian libclamav1_0.84-2.sarge.1_hppa.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_hppa.deb


• Debian libclamav1_0.84-2.sarge.1_i386.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_i386.deb


• Debian libclamav1_0.84-2.sarge.1_ia64.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_ia64.deb


• Debian libclamav1_0.84-2.sarge.1_m68k.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_m68k.deb


• Debian libclamav1_0.84-2.sarge.1_mips.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_mips.deb


• Debian libclamav1_0.84-2.sarge.1_mipsel.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_mipsel.deb


• Debian libclamav1_0.84-2.sarge.1_powerpc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_powerpc.deb


• Debian libclamav1_0.84-2.sarge.1_s390.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_s390.deb


• Debian libclamav1_0.84-2.sarge.1_sparc.deb
  Debian 3.1 (sarge)
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_sparc.deb

Clam Anti-Virus ClamAV 0.84 rc1

• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.84 rc2

• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.85

• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.85.1

• Clam Anti-Virus clamav-0.86.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d


• Conectiva clamav-0.86.1-70136U10_9cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-0.86.1-70136U10_9cl .i386.rpm


• Conectiva clamav-0.86.1-76089U90_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/clamav-0.86.1-76089U90_2cl. i386.rpm


• Conectiva clamav-database-0.86.1.20050625-70136U10_9cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-database-0.86.1.200 50625-70136U10_9cl.i386.rpm


• Conectiva clamav-database-0.86.1.20050625-76089U90_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/clamav-database-0.86.1.2005 0625-76089U90_2cl.i386.rpm


• Conectiva libclamav-devel-0.86.1-70136U10_9cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-0.86.1-701 36U10_9cl.i386.rpm


• Conectiva libclamav-devel-0.86.1-76089U90_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/libclamav-devel-0.86.1-7608 9U90_2cl.i386.rpm


• Conectiva libclamav-devel-static-0.86.1-70136U10_9cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-static-0.8 6.1-70136U10_9cl.i386.rpm


• Conectiva libclamav-devel-static-0.86.1-76089U90_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/libclamav-devel-static-0.86 .1-76089U90_2cl.i386.rpm


• Conectiva libclamav1-0.86.1-70136U10_9cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav1-0.86.1-70136U10 _9cl.i386.rpm


• Conectiva libclamav1-0.86.1-76089U90_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/libclamav1-0.86.1-76089U90_ 2cl.i386.rpm

Clam Anti-Virus ClamAV Cabinet File Parsing Remote Denial Of Service Vulnerability

References:

• [security-announce] I: updated packages available (ALT Linux)
  
• ClamAV Homepage (Clam Anti-Virus)
  
• ClamAV Version 0.81 Change Log (Clam Anti-Virus)
  
• iDEFENSE Security Advisory 06.29.05: Clam AntiVirus ClamAV Cabinet File Handling ("iDEFENSE Labs" )