ClamAV Multiple Unspecified Vulnerabilities

Bugtraq ID:	24358
Class:	Unknown
CVE:	CVE-2007-3024 CVE-2007-3023
Remote:	Yes
Local:	Yes
Published:	Jun 06 2007 12:00AM
Updated:	Jun 25 2007 04:18PM
Credit:	The discoverers of these issues are unknown.
Vulnerable:	SuSE Linux Enterprise Server 9 S.u.S.E. openSUSE 10.2 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 10.1 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Clam Anti-Virus ClamAV 0.90.2 Clam Anti-Virus ClamAV 0.90.1 + Debian Linux 4.0 sparc + Debian Linux 4.0 s/390 + Debian Linux 4.0 powerpc + Debian Linux 4.0 mipsel + Debian Linux 4.0 mips + Debian Linux 4.0 m68k + Debian Linux 4.0 ia-64 + Debian Linux 4.0 ia-32 + Debian Linux 4.0 hppa + Debian Linux 4.0 arm + Debian Linux 4.0 amd64 + Debian Linux 4.0 alpha + Debian Linux 4.0 Clam Anti-Virus ClamAV 0.90 - MandrakeSoft Corporate Server 4.0 x86_64 - MandrakeSoft Corporate Server 3.0 x86_64 - MandrakeSoft Corporate Server 3.0 - MandrakeSoft Corporate Server 4.0 - Mandriva Linux Mandrake 2007.1 x86_64 - Mandriva Linux Mandrake 2007.1 - Mandriva Linux Mandrake 2007.0 x86_64 - Mandriva Linux Mandrake 2007.0
Not Vulnerable:	Clam Anti-Virus ClamAV 0.90.3

ClamAV Multiple Unspecified Vulnerabilities

ClamAV is prone to multiple unspecified vulnerabilities.

These issues arise because the software incorrectly calculates the end of a buffer and gives improper permissions to temporary files.

Versions prior to ClamAV 0.90.3 are vulnerable to these issues.

ClamAV Multiple Unspecified Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

ClamAV Multiple Unspecified Vulnerabilities

Solution:
These issues have been addressed in ClamAV 0.90.3.


Clam Anti-Virus ClamAV 0.90

• Clam Anti-Virus clamav-0.90.3.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.3.tar.gz

Clam Anti-Virus ClamAV 0.90.1

• Clam Anti-Virus clamav-0.90.3.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.3.tar.gz

Clam Anti-Virus ClamAV 0.90.2

• Clam Anti-Virus clamav-0.90.3.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.3.tar.gz

ClamAV Multiple Unspecified Vulnerabilities

References:

• ClamAV Homepage (Clam Anti-Virus)