• info
• discussion
• exploit
• solution
• references

ClamAV MIME Header ID Parameter String Directory Traversal Vulnerability

Solution:
The vendor released an update to address this issue. Please contact the vendor for information on how to obtain and apply this update.


S.u.S.E. Linux 10.1 x86-64

• SuSE clamav-0.90-0.2.x86_64.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/clamav-0.90-0.2.x86 _64.rpm

S.u.S.E. Linux 10.1 x86

• SuSE clamav-0.90-0.2.i586.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/clamav-0.90-0.2.i586. rpm

Clam Anti-Virus ClamAV 0.53

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.65

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.70

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.80

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.80 rc1

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.80 rc2

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.81

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.82

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.84 rc1

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.85

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.85.1

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.86 .1

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.86.2

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.87

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz


• Mandriva clamav-0.90-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-0.90-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva clamav-0.90-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-0.90-0.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva clamav-db-0.90-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-db-0.90-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva clamav-db-0.90-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-db-0.90-0.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva clamav-milter-0.90-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-milter-0.90-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva clamav-milter-0.90-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-milter-0.90-0.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva clamd-0.90-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva clamd-0.90-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva clamd-0.90-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamd-0.90-0.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64clamav1-0.90-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64clamav1-0.90-0.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64clamav1-devel-0.90-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64clamav1-devel-0.90-0.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva libclamav1-0.90-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva libclamav1-0.90-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libclamav1-devel-0.90-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva libclamav1-devel-0.90-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download

Clam Anti-Virus ClamAV 0.87 -1

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

ifenslave ifenslave 0.88

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.88.2

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.88.3

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Clam Anti-Virus ClamAV 0.88.5

• Clam Anti-Virus clamav-0.90.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.90.tar.gz

Apple Mac OS X 10.4.11

• Apple SecUpd2008-002PPC.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002PPC.dmg


• Apple SecUpd2008-002Univ.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002Univ.dmg

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2008-002PPC.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002PPC.dmg


• Apple SecUpdSrvr2008-002Univ.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002Univ.dmg

Apple Mac OS X 10.5.2

• Apple SecUpd2008-002.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpd2008-002.dmg

Apple Mac OS X Server 10.5.2

• Apple SecUpdSrvr2008-002.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=18157&cat= 57&platform=osx&method=sa/SecUpdSrvr2008-002.dmg