CVE-2006-2427

2006-05-1710:06:00

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

25.6%

JSON

freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file.

Affected configurations

Nvd

Node

clam_anti-virusclamavMatch0.88

clam_anti-virusclamxavMatch1.0.3h

VendorProductVersionCPE
clam_anti-virusclamav0.88cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*
clam_anti-virusclamxav1.0.3hcpe:2.3:a:clam_anti-virus:clamxav:1.0.3h:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
clam_anti-virus	clamav	0.88	cpe:2.3:a:clam_anti-virus:clamav:0.88:::::::*
clam_anti-virus	clamxav	1.0.3h	cpe:2.3:a:clam_anti-virus:clamxav:1.0.3h:::::::*