BID:39170

Apple Mac OS X ClamAV Definition Update Security Bypass Vulnerability

Info

Apple Mac OS X ClamAV Definition Update Security Bypass Vulnerability

Bugtraq ID:	39170
Class:	Configuration Error
CVE:	CVE-2010-0058
Remote:	No
Local:	Yes
Published:	Mar 29 2010 12:00AM
Updated:	Mar 29 2010 12:00AM
Credit:	Bayard Bell, Wil Shipley of Delicious Monster, and David Ferrero of Zion Software, LLC
Vulnerable:	Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5

Not Vulnerable:

Discussion

Apple Mac OS X ClamAV Definition Update Security Bypass Vulnerability

Apple Mac OS X is prone to a security-bypass vulnerability that may allow an attacker to bypass virus scans.

Successful exploits will allow attackers to bypass virus scanning, possibly allowing malicious files to escape detection.

This issue affects Mac OS X 10.5.8 and Mac OS X Server 10.5.8.

Exploit / POC

Apple Mac OS X ClamAV Definition Update Security Bypass Vulnerability

Attackers can exploit this issue by sending malicious files to affected users.

Solution / Fix

Apple Mac OS X ClamAV Definition Update Security Bypass Vulnerability

Solution:
Updates are available to address this issue. Please see the references for more information.

Apple Mac OS X 10.5