Test Kennung:	1.3.6.1.4.1.25623.1.0.800079
Kategorie:	Denial of Service
Titel:	ClamAV Remote Denial of Service Vulnerability
Zusammenfassung:	This host has ClamAV installed, and is prone to denial of service; vulnerability.
Beschreibung:	Summary: This host has ClamAV installed, and is prone to denial of service vulnerability. Vulnerability Insight: The application fails to validate user input passed to cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions in special.c file. Vulnerability Impact: Successful exploitation will cause remote attackers to crash the daemon via a specially crafted JPEG file. Affected Software/OS: ClamAV before 0.94.2. Solution: Upgrade to ClamAV 0.94.2. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	BugTraq ID: 32555 Common Vulnerability Exposure (CVE) ID: CVE-2008-5314 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://www.securityfocus.com/bid/32555 Debian Security Information: DSA-1680 (Google Search) http://www.debian.org/security/2008/dsa-1680 https://www.exploit-db.com/exploits/7330 http://security.gentoo.org/glsa/glsa-200812-21.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:239 http://lurker.clamav.net/message/20081126.150241.55b1e092.en.html http://www.openwall.com/lists/oss-security/2008/12/01/8 http://osvdb.org/50363 http://www.securitytracker.com/id?1021296 http://secunia.com/advisories/32926 http://secunia.com/advisories/32936 http://secunia.com/advisories/33016 http://secunia.com/advisories/33195 http://secunia.com/advisories/33317 http://secunia.com/advisories/33937 SuSE Security Announcement: SUSE-SR:2008:028 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html http://www.ubuntu.com/usn/usn-684-1 http://www.vupen.com/english/advisories/2008/3311 http://www.vupen.com/english/advisories/2009/0422 XForce ISS Database: clamav-special-dos(46985) https://exchange.xforce.ibmcloud.com/vulnerabilities/46985
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.