Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2007-4560
HistoryAug 28, 2007 - 12:00 a.m.

CVE-2007-4560

2007-08-2800:00:00
ubuntu.com
ubuntu.com
29

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

0.965

Percentile

99.6%

JSON

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows
remote attackers to execute arbitrary commands via shell metacharacters
that are used in a certain popen call, involving the “recipient field of
sendmail.”

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchclamav< 0.92.1~dfsg2-1.1~dapper2UNKNOWN
ubuntu7.04noarchclamav< 0.90.2-0ubuntu1.4UNKNOWN

Related

prion 1
saint 4
debiancve 1
cve 1
nvd 1
checkpoint_advisories 3
nessus 6
cvelist 1
d2 1
packetstorm 1
metasploit 1
exploitdb 2
debian 1
gentoo 1
osv 1
f5 2
openvas 6
altlinux 3
prion
prion
Code injection
2007-08-28 01:17:00
saint
saint
ClamAV milter popen command injection
2007-09-06 00:00:00
ClamAV milter popen command injection
2007-09-06 00:00:00
ClamAV milter popen command injection
2007-09-06 00:00:00
debiancve
debiancve
CVE-2007-4560
2007-08-28 01:17:00
cve
cve
CVE-2007-4560
2007-08-28 01:17:00
nvd
nvd
CVE-2007-4560
2007-08-28 01:17:00
checkpoint_advisories
checkpoint_advisories
ClamAV Mail Filter Extension Crafted Recipient Command Execution (CVE-2007-4560)
2009-11-15 00:00:00
ClamAV Mail Filter Extension Crafted Recipient Command Execution - ver 2 (CVE-2007-4560)
2014-05-29 00:00:00
Preemptive Protection against ClamAV Mail Filter Extension Code Execution Vulnerability
2007-09-10 00:00:00
nessus
nessus
ClamAV clamav-milter black-hole-mode Sendmail Recipient Field Arbitrary Command Execution
2008-01-03 00:00:00
Mandrake Linux Security Advisory : clamav (MDKSA-2007:172)
2007-09-03 00:00:00
Fedora 7 : clamav-0.91.2-2.fc7 (2007-2050)
2007-11-06 00:00:00
cvelist
cvelist
CVE-2007-4560
2007-08-28 01:00:00
d2
d2
DSquare Exploit Pack: D2SEC_CLAMAV
2007-08-28 01:17:00
packetstorm
packetstorm
ClamAV Milter Blackhole-Mode Remote Code Execution
2009-10-28 00:00:00
metasploit
metasploit
ClamAV Milter Blackhole-Mode Remote Code Execution
2008-03-17 11:51:30
exploitdb
exploitdb
ClamAV Milter 0.92.2 - Blackhole-Mode (Sendmail) Code Execution (Metasploit)
2007-08-24 00:00:00
ClamAV Milter - Blackhole-Mode Remote Code Execution (Metasploit)
2010-10-09 00:00:00
debian
debian
[SECURITY] [DSA 1366-1] New clamav packages fix several vulnerabilities
2007-09-01 11:53:51
gentoo
gentoo
ClamAV: Multiple vulnerabilities
2007-09-20 00:00:00
osv
osv
clamav
2007-09-01 00:00:00
f5
f5
SOL7985 - ClamAV clamav-milter vulnerability - CVE-2007-4560
2007-09-27 00:00:00
K7985 : ClamAV clamav-milter vulnerability - CVE-2007-4560
2013-03-19 00:00:00
openvas
openvas
Debian Security Advisory DSA 1366-1 (clamav)
2008-01-17 00:00:00
Mandriva Update for clamav MDKSA-2007:172 (clamav)
2009-04-09 00:00:00
Mandriva Update for clamav MDKSA-2007:172 (clamav)
2009-04-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package clamav version 0.91.2-alt1
2007-09-03 00:00:00
Security fix for the ALT Linux 8 package clamav version 0.91.2-alt1
2007-09-03 00:00:00
Security fix for the ALT Linux 10 package clamav version 0.91.2-alt1
2007-09-03 00:00:00

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

0.965

Percentile

99.6%

JSON
Related for UB:CVE-2007-4560
prion1saint4debiancve1cve1nvd1checkpoint_advisories3nessus6cvelist1d21packetstorm1metasploit1exploitdb2debian1gentoo1osv1f52openvas6altlinux3