Debian DSA-1320-1 : clamav - several vulnerabilities

critical Nessus Plugin ID 25586

Synopsis

The remote Debian host is missing a security-related update.

Description

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems :

- CVE-2007-2650 It was discovered that the OLE2 parser can be tricked into an infinite loop and memory exhaustion.

- CVE-2007-3023 It was discovered that the NsPack decompression code performed insufficient sanitising on an internal length variable, resulting in a potential buffer overflow.

- CVE-2007-3024 It was discovered that temporary files were created with insecure permissions, resulting in information disclosure.

- CVE-2007-3122 It was discovered that the decompression code for RAR archives allows bypassing a scan of a RAR archive due to insufficient validity checks.

- CVE-2007-3123 It was discovered that the decompression code for RAR archives performs insufficient validation of header values, resulting in a buffer overflow.

Solution

Upgrade the clamav packages. An updated package for oldstable/powerpc is not yet available. It will be provided later.

For the oldstable distribution (sarge) these problems have been fixed in version 0.84-2.sarge.17. Please note that the fix for CVE-2007-3024 hasn't been backported to oldstable.

For the stable distribution (etch) these problems have been fixed in version 0.90.1-3etch1.

Plugin Details

Severity: Critical

ID: 25586

File Name: debian_DSA-1320.nasl

Version: 1.21

Type: Local

Agent: unix

Family: Debian Local Security Checks

Published: 6/27/2007

Updated: 1/4/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.15

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:debian:debian_linux:4.0, cpe:/o:debian:debian_linux:3.1, p-cpe:/a:debian:debian_linux:clamav

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Patch Publication Date: 6/23/2007

Reference Information

CVE: CVE-2007-2650, CVE-2007-3023, CVE-2007-3024, CVE-2007-3025, CVE-2007-3122, CVE-2007-3123

DSA: 1320

Detections

Analytics