Vulnerability-Lookup

CVE-2006-1989 (GCVE-0-2006-1989)

Vulnerability from cvelistv5 – Published: 2006-05-01 19:00 – Updated: 2024-08-07 17:35

Summary

Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2333 records in the last 180 days details

References

24 references

URL	Tags
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://secunia.com/advisories/20159	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.kb.cert.org/vuls/id/599220	third-party-advisoryx_refsource_CERT-VN
http://secunia.com/advisories/19963	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/1586	vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://securitytracker.com/id?1016392	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/19964	third-party-advisoryx_refsource_SECUNIA
http://www.trustix.org/errata/2006/0024	vendor-advisoryx_refsource_TRUSTIX
http://secunia.com/advisories/19912	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/19880	third-party-advisoryx_refsource_SECUNIA
http://www.clamav.net/security/0.88.2.html	x_refsource_CONFIRM
http://kolab.org/security/kolab-vendor-notice-09.txt	x_refsource_CONFIRM
http://www.osvdb.org/25120	vdb-entryx_refsource_OSVDB
http://lists.suse.com/archive/suse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/20117	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1050	vendor-advisoryx_refsource_DEBIAN
http://www.gentoo.org/security/en/glsa/glsa-20060…	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/20877	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/2566	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/17754	vdb-entryx_refsource_BID
http://secunia.com/advisories/19874	third-party-advisoryx_refsource_SECUNIA

Date Public

2006-05-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:35:29.986Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "APPLE-SA-2006-06-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
          },
          {
            "name": "20159",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20159"
          },
          {
            "name": "MDKSA-2006:080",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
          },
          {
            "name": "VU#599220",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/599220"
          },
          {
            "name": "19963",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19963"
          },
          {
            "name": "ADV-2006-1586",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1586"
          },
          {
            "name": "clamav-freshclam-http-bo(26182)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
          },
          {
            "name": "1016392",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016392"
          },
          {
            "name": "19964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19964"
          },
          {
            "name": "2006-0024",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2006/0024"
          },
          {
            "name": "19912",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19912"
          },
          {
            "name": "SUSE-SA:2006:025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
          },
          {
            "name": "19880",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19880"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.clamav.net/security/0.88.2.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
          },
          {
            "name": "25120",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/25120"
          },
          {
            "name": "SUSE-SR:2006:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
          },
          {
            "name": "20117",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20117"
          },
          {
            "name": "DSA-1050",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1050"
          },
          {
            "name": "GLSA-200605-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
          },
          {
            "name": "20877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20877"
          },
          {
            "name": "ADV-2006-2566",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2566"
          },
          {
            "name": "17754",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17754"
          },
          {
            "name": "19874",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19874"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-05-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "APPLE-SA-2006-06-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
        },
        {
          "name": "20159",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20159"
        },
        {
          "name": "MDKSA-2006:080",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
        },
        {
          "name": "VU#599220",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/599220"
        },
        {
          "name": "19963",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19963"
        },
        {
          "name": "ADV-2006-1586",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1586"
        },
        {
          "name": "clamav-freshclam-http-bo(26182)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
        },
        {
          "name": "1016392",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016392"
        },
        {
          "name": "19964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19964"
        },
        {
          "name": "2006-0024",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2006/0024"
        },
        {
          "name": "19912",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19912"
        },
        {
          "name": "SUSE-SA:2006:025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
        },
        {
          "name": "19880",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19880"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.clamav.net/security/0.88.2.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
        },
        {
          "name": "25120",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/25120"
        },
        {
          "name": "SUSE-SR:2006:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
        },
        {
          "name": "20117",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20117"
        },
        {
          "name": "DSA-1050",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1050"
        },
        {
          "name": "GLSA-200605-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
        },
        {
          "name": "20877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20877"
        },
        {
          "name": "ADV-2006-2566",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2566"
        },
        {
          "name": "17754",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17754"
        },
        {
          "name": "19874",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19874"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1989",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "APPLE-SA-2006-06-27",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
            },
            {
              "name": "20159",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20159"
            },
            {
              "name": "MDKSA-2006:080",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
            },
            {
              "name": "VU#599220",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/599220"
            },
            {
              "name": "19963",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19963"
            },
            {
              "name": "ADV-2006-1586",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1586"
            },
            {
              "name": "clamav-freshclam-http-bo(26182)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
            },
            {
              "name": "1016392",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016392"
            },
            {
              "name": "19964",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19964"
            },
            {
              "name": "2006-0024",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2006/0024"
            },
            {
              "name": "19912",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19912"
            },
            {
              "name": "SUSE-SA:2006:025",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
            },
            {
              "name": "19880",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19880"
            },
            {
              "name": "http://www.clamav.net/security/0.88.2.html",
              "refsource": "CONFIRM",
              "url": "http://www.clamav.net/security/0.88.2.html"
            },
            {
              "name": "http://kolab.org/security/kolab-vendor-notice-09.txt",
              "refsource": "CONFIRM",
              "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
            },
            {
              "name": "25120",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/25120"
            },
            {
              "name": "SUSE-SR:2006:010",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
            },
            {
              "name": "20117",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20117"
            },
            {
              "name": "DSA-1050",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1050"
            },
            {
              "name": "GLSA-200605-03",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
            },
            {
              "name": "20877",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20877"
            },
            {
              "name": "ADV-2006-2566",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2566"
            },
            {
              "name": "17754",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17754"
            },
            {
              "name": "19874",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19874"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1989",
    "datePublished": "2006-05-01T19:00:00.000Z",
    "dateReserved": "2006-04-24T00:00:00.000Z",
    "dateUpdated": "2024-08-07T17:35:29.986Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2006-1989",
      "date": "2026-10-21",
      "epss": "0.05946",
      "percentile": "0.93237"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5F56722F-F61A-404B-B0B2-1C92C22D0436",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D00EBC44-B4AB-443F-A063-8C8CB64F5F94",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers."
          }
        ],
        "evaluatorSolution": "This vulnerability is addressed in the following product release:\r\nClam Anti-Virus, ClamAV, 0.88.2",
        "id": "CVE-2006-1989",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "HIGH",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.1,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 4.9,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": true,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2006-05-01T19:06:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19874"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/19880"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19912"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19963"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19964"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/20117"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/20159"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/20877"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securitytracker.com/id?1016392"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "http://www.clamav.net/security/0.88.2.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2006/dsa-1050"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/599220"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.osvdb.org/25120"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/17754"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.trustix.org/errata/2006/0024"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2006/1586"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2006/2566"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19874"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/19880"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19912"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19963"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19964"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/20117"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/20159"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/20877"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1016392"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Vendor Advisory"
            ],
            "url": "http://www.clamav.net/security/0.88.2.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2006/dsa-1050"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/599220"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/25120"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/17754"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.trustix.org/errata/2006/0024"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2006/1586"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2006/2566"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTA-2006-AVI-176

Vulnerability from certfr_avis - Published: 2006-05-03 - Updated: 2006-05-04

Une vulnérabilité a été découverte dans Freshclam permettant de réaliser un déni de service ou d'exécuter du code arbitraire.

Description

Freshclam est un utilitaire de ClamAV en ligne de commande permettant de télécharger et d'installer les mises à jour des bases de signatures des virus. Une vulnérabilité a été découverte dans le client HTTP de Freshclam lors de la vérification de la taille des en-têtes des données provenant d'un serveur HTTP. L'exploitation de cette vulnérabilité, qui requiert un serveur HTTP malveillant d'hébergement des bases de signatures, permet de réaliser un déni de service ou d'exécuter du code arbitraire.

Solution

Mettre à jour en version 0.88.2 (voir Documentation).

ClamAV versions 0.80 à 0.88.1.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CERTA-2006-AVI-262

Vulnerability from certfr_avis - Published: 2006-06-29 - Updated: 2006-06-29

De multiples vulnérabilités dans Apple MacOS X permettent à un utilisateur mal intentionné de porter atteinte à la confidentialité des données, de réaliser un déni de service ou d'exécuter du code arbitraire à distance sur la plate-forme vulnérable.

Description

De multiples vulnérabilités affectent Apple MacOS X :

Une vulnérabilité dans le serveur AFP (Apple File Protocol) permet à un utilisateur mal intentionné de porter atteinte à la confidentialité des données (CVE-2006-1468) ;
une vulnérabilité dans ClamAV permet à un utilisateur mal intentionné d'exécuter du code arbitraire à distance (CVE-2006-1989) ;
une vulnérabilité dans ImageIO permet à un utilisateur mal intentionné d'exécuter du code arbitraire au moyen d'un fichier image au format TIFF habilement constitué (CVE-2006-1469) ;
une vulnérabilité dans launchd permet à un utilisateur local authentifié d'élever ses privilèges (CVE-2006-1471) ;
une vulnérabilité dans OpenLDAP permet à un utilisateur mal intentionné d'exécuter du code arbitraire à distance au moyen d'une requête LDAP habilement constituée (CVE-2006-1470).

Solution

Mettre à jour Apple MacOS X en version 10.4.7. Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

MacOS X 10.4 jusqu'à la version 10.4.6.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2006-1989

Vulnerability from fkie_nvd - Published: 2006-05-01 19:06 - Updated: 2026-06-16 22:24

Severity

Summary

Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.

References

URL	Tags
cve@mitre.org	http://kolab.org/security/kolab-vendor-notice-09.txt
cve@mitre.org	http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html
cve@mitre.org	http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html
cve@mitre.org	http://secunia.com/advisories/19874
cve@mitre.org	http://secunia.com/advisories/19880	Exploit, Patch, Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/19912
cve@mitre.org	http://secunia.com/advisories/19963
cve@mitre.org	http://secunia.com/advisories/19964
cve@mitre.org	http://secunia.com/advisories/20117
cve@mitre.org	http://secunia.com/advisories/20159
cve@mitre.org	http://secunia.com/advisories/20877
cve@mitre.org	http://securitytracker.com/id?1016392
cve@mitre.org	http://www.clamav.net/security/0.88.2.html	Exploit, Vendor Advisory
cve@mitre.org	http://www.debian.org/security/2006/dsa-1050
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml
cve@mitre.org	http://www.kb.cert.org/vuls/id/599220	US Government Resource
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDKSA-2006:080
cve@mitre.org	http://www.novell.com/linux/security/advisories/2006_05_05.html
cve@mitre.org	http://www.osvdb.org/25120
cve@mitre.org	http://www.securityfocus.com/bid/17754	Patch
cve@mitre.org	http://www.trustix.org/errata/2006/0024
cve@mitre.org	http://www.vupen.com/english/advisories/2006/1586
cve@mitre.org	http://www.vupen.com/english/advisories/2006/2566
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/26182
af854a3a-2127-422b-91ae-364da2661108	http://kolab.org/security/kolab-vendor-notice-09.txt
af854a3a-2127-422b-91ae-364da2661108	http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19874
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19880	Exploit, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19912
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19963
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19964
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/20117
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/20159
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/20877
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1016392
af854a3a-2127-422b-91ae-364da2661108	http://www.clamav.net/security/0.88.2.html	Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-1050
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/599220	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2006:080
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2006_05_05.html
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/25120
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/17754	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.trustix.org/errata/2006/0024
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/1586
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/2566
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/26182

Impacted products

	Vendor	Product	Version
	clam_anti-virus	clamav	0.88
	clam_anti-virus	clamav	0.88.1

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F56722F-F61A-404B-B0B2-1C92C22D0436",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D00EBC44-B4AB-443F-A063-8C8CB64F5F94",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers."
    }
  ],
  "evaluatorSolution": "This vulnerability is addressed in the following product release:\r\nClam Anti-Virus, ClamAV, 0.88.2",
  "id": "CVE-2006-1989",
  "lastModified": "2026-06-16T22:24:04.983",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-05-01T19:06:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19874"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19880"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19912"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19963"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19964"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/20117"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/20159"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/20877"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1016392"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://www.clamav.net/security/0.88.2.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2006/dsa-1050"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/599220"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/25120"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/17754"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.trustix.org/errata/2006/0024"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/1586"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/2566"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19874"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19880"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19912"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19963"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19964"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/20117"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/20159"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/20877"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1016392"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://www.clamav.net/security/0.88.2.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1050"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/599220"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/25120"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/17754"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.trustix.org/errata/2006/0024"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/1586"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/2566"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-66XQ-FPGF-CHWG

Vulnerability from github – Published: 2022-05-01 06:54 – Updated: 2022-05-01 06:54

Details

Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-1989"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-05-01T19:06:00Z",
    "severity": "MODERATE"
  },
  "details": "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.",
  "id": "GHSA-66xq-fpgf-chwg",
  "modified": "2022-05-01T06:54:50Z",
  "published": "2022-05-01T06:54:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1989"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
    },
    {
      "type": "WEB",
      "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19874"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19880"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19912"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19963"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19964"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20117"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20159"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20877"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1016392"
    },
    {
      "type": "WEB",
      "url": "http://www.clamav.net/security/0.88.2.html"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-1050"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/599220"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/25120"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/17754"
    },
    {
      "type": "WEB",
      "url": "http://www.trustix.org/errata/2006/0024"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/1586"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/2566"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2006-1989

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.

Aliases

CVE-2006-1989

Aliases

CVE-2006-1989

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2006-1989",
    "description": "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.",
    "id": "GSD-2006-1989",
    "references": [
      "https://www.suse.com/security/cve/CVE-2006-1989.html",
      "https://www.debian.org/security/2006/dsa-1050"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-1989"
      ],
      "details": "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.",
      "id": "GSD-2006-1989",
      "modified": "2023-12-13T01:19:55.201959Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2006-1989",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "APPLE-SA-2006-06-27",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
          },
          {
            "name": "20159",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/20159"
          },
          {
            "name": "MDKSA-2006:080",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
          },
          {
            "name": "VU#599220",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/599220"
          },
          {
            "name": "19963",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19963"
          },
          {
            "name": "ADV-2006-1586",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/1586"
          },
          {
            "name": "clamav-freshclam-http-bo(26182)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
          },
          {
            "name": "1016392",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1016392"
          },
          {
            "name": "19964",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19964"
          },
          {
            "name": "2006-0024",
            "refsource": "TRUSTIX",
            "url": "http://www.trustix.org/errata/2006/0024"
          },
          {
            "name": "19912",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19912"
          },
          {
            "name": "SUSE-SA:2006:025",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
          },
          {
            "name": "19880",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19880"
          },
          {
            "name": "http://www.clamav.net/security/0.88.2.html",
            "refsource": "CONFIRM",
            "url": "http://www.clamav.net/security/0.88.2.html"
          },
          {
            "name": "http://kolab.org/security/kolab-vendor-notice-09.txt",
            "refsource": "CONFIRM",
            "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
          },
          {
            "name": "25120",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/25120"
          },
          {
            "name": "SUSE-SR:2006:010",
            "refsource": "SUSE",
            "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
          },
          {
            "name": "20117",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/20117"
          },
          {
            "name": "DSA-1050",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2006/dsa-1050"
          },
          {
            "name": "GLSA-200605-03",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
          },
          {
            "name": "20877",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/20877"
          },
          {
            "name": "ADV-2006-2566",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/2566"
          },
          {
            "name": "17754",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/17754"
          },
          {
            "name": "19874",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19874"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1989"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.clamav.net/security/0.88.2.html",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit",
                "Vendor Advisory"
              ],
              "url": "http://www.clamav.net/security/0.88.2.html"
            },
            {
              "name": "17754",
              "refsource": "BID",
              "tags": [
                "Patch"
              ],
              "url": "http://www.securityfocus.com/bid/17754"
            },
            {
              "name": "19880",
              "refsource": "SECUNIA",
              "tags": [
                "Exploit",
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/19880"
            },
            {
              "name": "DSA-1050",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-1050"
            },
            {
              "name": "GLSA-200605-03",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml"
            },
            {
              "name": "25120",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/25120"
            },
            {
              "name": "19912",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19912"
            },
            {
              "name": "19963",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19963"
            },
            {
              "name": "2006-0024",
              "refsource": "TRUSTIX",
              "tags": [],
              "url": "http://www.trustix.org/errata/2006/0024"
            },
            {
              "name": "19874",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19874"
            },
            {
              "name": "19964",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19964"
            },
            {
              "name": "http://kolab.org/security/kolab-vendor-notice-09.txt",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://kolab.org/security/kolab-vendor-notice-09.txt"
            },
            {
              "name": "SUSE-SR:2006:010",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html"
            },
            {
              "name": "20159",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/20159"
            },
            {
              "name": "20117",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/20117"
            },
            {
              "name": "SUSE-SA:2006:025",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2006_05_05.html"
            },
            {
              "name": "APPLE-SA-2006-06-27",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html"
            },
            {
              "name": "VU#599220",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/599220"
            },
            {
              "name": "1016392",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1016392"
            },
            {
              "name": "20877",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/20877"
            },
            {
              "name": "MDKSA-2006:080",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:080"
            },
            {
              "name": "ADV-2006-1586",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/1586"
            },
            {
              "name": "ADV-2006-2566",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/2566"
            },
            {
              "name": "clamav-freshclam-http-bo(26182)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26182"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.1,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 4.9,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-07-20T01:31Z",
      "publishedDate": "2006-05-01T19:06Z"
    }
  }
}

OPENSUSE-SU-2024:10685-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:03

Summary

clamav-0.103.3-1.4 on GA media

Severity

Moderate

Scope

55 vulnerabilities in this advisory, including CVE-2006-1989.

CVE-2006-1989

Recommended: 20 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2006-1989 (GCVE-0-2006-1989)

CERTA-2006-AVI-176

Description

Solution

CERTA-2006-AVI-262

Description

Solution

FKIE_CVE-2006-1989

GHSA-66XQ-FPGF-CHWG

GSD-2006-1989

OPENSUSE-SU-2024:10685-1

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour