Search
Find a vulnerability
Search criteria
2 vulnerabilities found for clamxav by clam_anti-virus
CVE-2006-2427 (GCVE-0-2006-2427)
Vulnerability from nvd – Published: 2006-05-17 10:00 – Updated: 2024-08-07 17:51
VLAI
EPSS
VEX
Summary
freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securitytracker.com/id?1016086 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/434008/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2006/1807 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/20085 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/912 | third-party-advisoryx_refsource_SREASON |
| http://www.digitalmunition.com/DMA%5B2006-0514a%5D.txt | x_refsource_MISC |
Date Public
2006-05-14 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:51:04.688Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "clamxav-freshclam-insecure-privileges(26453)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26453"
},
{
"name": "1016086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016086"
},
{
"name": "20060515 DMA[2006-0514a] - \u0027ClamAV freshclam incorrect privilege drop\u0027",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/434008/100/0/threaded"
},
{
"name": "ADV-2006-1807",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/1807"
},
{
"name": "20085",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/20085"
},
{
"name": "912",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/912"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.digitalmunition.com/DMA%5B2006-0514a%5D.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-05-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "clamxav-freshclam-insecure-privileges(26453)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26453"
},
{
"name": "1016086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016086"
},
{
"name": "20060515 DMA[2006-0514a] - \u0027ClamAV freshclam incorrect privilege drop\u0027",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/434008/100/0/threaded"
},
{
"name": "ADV-2006-1807",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/1807"
},
{
"name": "20085",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/20085"
},
{
"name": "912",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/912"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.digitalmunition.com/DMA%5B2006-0514a%5D.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-2427",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "clamxav-freshclam-insecure-privileges(26453)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26453"
},
{
"name": "1016086",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016086"
},
{
"name": "20060515 DMA[2006-0514a] - \u0027ClamAV freshclam incorrect privilege drop\u0027",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/434008/100/0/threaded"
},
{
"name": "ADV-2006-1807",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/1807"
},
{
"name": "20085",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/20085"
},
{
"name": "912",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/912"
},
{
"name": "http://www.digitalmunition.com/DMA[2006-0514a].txt",
"refsource": "MISC",
"url": "http://www.digitalmunition.com/DMA[2006-0514a].txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-2427",
"datePublished": "2006-05-17T10:00:00.000Z",
"dateReserved": "2006-05-17T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:51:04.688Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-2427 (GCVE-0-2006-2427)
Vulnerability from cvelistv5 – Published: 2006-05-17 10:00 – Updated: 2024-08-07 17:51
VLAI
EPSS
VEX
Summary
freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securitytracker.com/id?1016086 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/archive/1/434008/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2006/1807 | vdb-entryx_refsource_VUPEN |
| http://secunia.com/advisories/20085 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/912 | third-party-advisoryx_refsource_SREASON |
| http://www.digitalmunition.com/DMA%5B2006-0514a%5D.txt | x_refsource_MISC |
Date Public
2006-05-14 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:51:04.688Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "clamxav-freshclam-insecure-privileges(26453)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26453"
},
{
"name": "1016086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016086"
},
{
"name": "20060515 DMA[2006-0514a] - \u0027ClamAV freshclam incorrect privilege drop\u0027",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/434008/100/0/threaded"
},
{
"name": "ADV-2006-1807",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/1807"
},
{
"name": "20085",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/20085"
},
{
"name": "912",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/912"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.digitalmunition.com/DMA%5B2006-0514a%5D.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-05-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "clamxav-freshclam-insecure-privileges(26453)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26453"
},
{
"name": "1016086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016086"
},
{
"name": "20060515 DMA[2006-0514a] - \u0027ClamAV freshclam incorrect privilege drop\u0027",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/434008/100/0/threaded"
},
{
"name": "ADV-2006-1807",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/1807"
},
{
"name": "20085",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/20085"
},
{
"name": "912",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/912"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.digitalmunition.com/DMA%5B2006-0514a%5D.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-2427",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "clamxav-freshclam-insecure-privileges(26453)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26453"
},
{
"name": "1016086",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016086"
},
{
"name": "20060515 DMA[2006-0514a] - \u0027ClamAV freshclam incorrect privilege drop\u0027",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/434008/100/0/threaded"
},
{
"name": "ADV-2006-1807",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/1807"
},
{
"name": "20085",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/20085"
},
{
"name": "912",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/912"
},
{
"name": "http://www.digitalmunition.com/DMA[2006-0514a].txt",
"refsource": "MISC",
"url": "http://www.digitalmunition.com/DMA[2006-0514a].txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-2427",
"datePublished": "2006-05-17T10:00:00.000Z",
"dateReserved": "2006-05-17T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:51:04.688Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}