CVE-2006-1989

Related Files

Debian Linux Security Advisory 1050-1

Posted May 6, 2006

Authored by Debian | Site debian.org

Debian Security Advisory 1050-1 - Ulf Harnhammar and an anonymous researcher from Germany discovered a vulnerability in the protocol code of freshclam, a command line utility responsible for downloading and installing virus signature updates for ClamAV, the antivirus scanner for Unix. This could lead to a denial of service or potentially the execution of arbitrary code.

tags | advisory, denial of service, arbitrary, protocol, virus

systems | linux, unix, debian

advisories | CVE-2006-1989

SHA-256 | 9c4b762a70dff5cd5f6f80156cada5f3fe6b372dc0ebb9ad419336a64f893088

Download | Favorite | View

Mandriva Linux Security Advisory 2006.080

Posted May 2, 2006

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory MDKSA-2006-080: Ulf Harnhammar discovered that the freshclam tool does not do a proper check for the size of header data received from a web server. This could potentially allow a specially prepared HTTP server to exploit freshclam clients connecting to a database mirror and causing a DoS. The updated packages have been updated to Clamav 0.88.2 which corrects this problem.

tags | advisory, web

systems | linux, mandriva

advisories | CVE-2006-1989

SHA-256 | cd9da835477073b5e90d6e13b1ba55414304793ab54dca4323c406276e320f22

Download | Favorite | View