ClamAV < 0.95.1, multiple vulnerabilities

infwonder · **Posted:** Fri Apr 03, 2009 5:21 am

SecurityFocus wrote:

ClamAV AntiVirus is prone to a vulnerability that may allow certain compressed archives to bypass the scan engine.

Successful exploits will allow attackers to distribute files containing malicious code that the antivirus application will fail to detect.

ClamAV 0.94 is vulnerable; prior versions may also be affected.

More information can be found here:
http://blog.zoller.lu/2009/04/clamav-09 ... ypass.html

ClamAV 0.95 has been released with fixes against this issue (bb#1467):
http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog

We currently have version 0.94.2 in both types of repo.

References:
http://www.securityfocus.com/bid/34344
http://www.nessus.org/plugins/index.php ... e&id=36075

!8!

infwonder · **Posted:** Thu Apr 09, 2009 8:06 pm

Another security issue has been found in clamav and is fixed in version 0.95.1:
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1552
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553

Change log:
http://freshmeat.net/urls/da648e61a906e ... 5c712779b8

::)

ClamAV < 0.95.1, multiple vulnerabilities

Who is online