CVE-2012-3501 The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to caus...
MediumCVSS 5.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as demonstrated using %0D or %0A.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| darold squidclamav | = 5.0 | No fix listed |
| darold squidclamav | = 5.1 | No fix listed |
| darold squidclamav | = 5.2 | No fix listed |
| darold squidclamav | = 5.3 | No fix listed |
| darold squidclamav | = 5.4 | No fix listed |
| darold squidclamav | = 5.5 | No fix listed |
| darold squidclamav | = 5.6 | No fix listed |
| darold squidclamav | = 5.7 | No fix listed |
| darold squidclamav | = 6.0 | No fix listed |
| darold squidclamav | = 6.1 | No fix listed |
| darold squidclamav | = 6.2 | No fix listed |
| darold squidclamav | = 6.3 | No fix listed |
| darold squidclamav | = 6.4 | No fix listed |
| darold squidclamav | = 6.5 | No fix listed |
| darold squidclamav | = 6.6 | No fix listed |
References
- freecode.com
- 49057 third-party-advisory vendor-advisory
- squidclamav.darold.net vendor-advisory
- [oss-security] 20120816 CVE Request: SquidClamav insufficient escaping flaws mailing-list
- [oss-security] 20120816 Re: CVE Request: SquidClamav insufficient escaping flaws mailing-list
- 84138 vdb-entry
- 54663 vdb-entry
- bugs.gentoo.org
- github.com exploit patch