Detections
Analytics
ClamAV < 0.91.2 Multiple Remote DoS (deprecated)
high Nessus Network Monitor Plugin ID 4183
Synopsis
The remote host is vulnerable to a Denial of Service (DoS) attack.Description
The remote host is running the ClamAV anti-virus client.This version of ClamAV is vulnerable to multiple denial of service (DoS) attacks when handling malformed files. An attacker exploiting this flaw would only need the ability to send an email to the vulnerable system. Successful exploitation would result in the application crashing.
Solution
Upgrade to version 0.91.2 or higher.See Also
http://sourceforge.net/project/shownotes.php?release_id=533658&group_id=86638
Plugin Details
Severity: High
ID: 4183
Family: Web Clients
Published: 8/22/2007
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 7.9
Temporal Score: 6.5
Vector: CVSS2#AV:A/AC:M/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 7
Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Exploitable With
CANVAS (D2ExploitPack)
Metasploit (ClamAV Milter Blackhole-Mode Remote Code Execution)
Reference Information
CVE: CVE-2007-4510, CVE-2007-4560