Detections
Analytics
SuSE9 Security Update : clamav (YOU Patch Number 12610)
critical Nessus Plugin ID 46169
Language:
Synopsis
The remote SuSE 9 host is missing a security-related patch.Description
Specially crafted CAB archives could crash clamav (CVE-2010-1311) or bypass virus detection (CVE-2010-0098). clamav has been updated to version 0.96 which fixes those issues.Citing freshmeat.net :
This Release introduces new malware detection mechanisms and other significant improvements to the scan engine. Key features include the bytecode interpreter, heuristic improvements, signature improvements, support for new archives, support for new executable file formats, support for UPX 3.0, performance improvements and memory optimizations.
Solution
Apply YOU patch number 12610.See Also
Plugin Details
Severity: Critical
ID: 46169
File Name: suse9_12610.nasl
Version: 1.6
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 4/28/2010
Updated: 1/14/2021
Supported Sensors: Continuous Assessment, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:suse:suse_linux
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 4/15/2010
Reference Information
CVE: CVE-2010-0098, CVE-2010-1311