CVE-2007-4560 clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the....
HighCVSS 7.6
EPSS 83.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clam anti-virus clamav | <= 0.91.1 | No fix listed |
| debian/clamav(Debian:12) | < 0.91.2-1~volatile1 | 0.91.2-1~volatile1 |
| debian/clamav(Debian:13) | < 0.91.2-1~volatile1 | 0.91.2-1~volatile1 |
| debian/clamav(Debian:14) | < 0.91.2-1~volatile1 | 0.91.2-1~volatile1 |
References
- Debian Security Tracker CVE-2007-4560 vendor-advisory
- docs.info.apple.com
- APPLE-SA-2008-03-18 vendor-advisory
- 26654 third-party-advisory vendor-advisory
- 26674 third-party-advisory vendor-advisory
- 26683 third-party-advisory vendor-advisory
- 26751 third-party-advisory vendor-advisory
- 26822 third-party-advisory vendor-advisory
- 26916 third-party-advisory vendor-advisory
- 29420 third-party-advisory
- GLSA-200709-14 vendor-advisory
- 3063 third-party-advisory
- DSA-1366 vendor-advisory
- MDKSA-2007:172 vendor-advisory
- SUSE-SR:2007:018 vendor-advisory
- www.nruns.com patch
- 20070824 n.runs-SA-2007.025 - ClamAV Remote Code Execution Advisory mailing-list
- 25439 patch vdb-entry
- 1018610 vdb-entry
- 2007-0026 vendor-advisory
- ADV-2008-0924 vdb-entry
- FEDORA-2007-2050 vendor-advisory