PRIOn knowledge basePRION:CVE-2007-0897Open redirect
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mac_os_x_server | lt | 10.4.11 | |
| clamav | lt | 0.90 | |
| debian_linux | eq | 3.1 |
References
docs.info.apple.com/article.html?artnum=307562
labs.idefense.com/intelligence/vulnerabilities/display.php?id=475
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
lists.suse.com/archive/suse-security-announce/2007-Feb/0004.html
osvdb.org/32283
secunia.com/advisories/24183
secunia.com/advisories/24187
secunia.com/advisories/24192
secunia.com/advisories/24319
secunia.com/advisories/24332
secunia.com/advisories/24425
secunia.com/advisories/29420
security.gentoo.org/glsa/glsa-200703-03.xml
www.debian.org/security/2007/dsa-1263
www.mandriva.com/security/advisories?name=MDKSA-2007:043
www.securityfocus.com/bid/22580
www.securitytracker.com/id?1017659
www.vupen.com/english/advisories/2007/0623
www.vupen.com/english/advisories/2008/0924/references
exchange.xforce.ibmcloud.com/vulnerabilities/32531
Related
