Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-1835

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2008-1835
Last Modified 07 Mar 2011 10:07:42
Published 16 Apr 2008 12:05:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2008-1835

Summary

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.

Vulnerable Systems

Application

  • Clam Anti-virus Clamav 0.15

  • Clam Anti-virus Clamav 0.20

  • Clam Anti-virus Clamav 0.21

  • Clam Anti-virus Clamav 0.22

  • Clam Anti-virus Clamav 0.23

  • Clam Anti-virus Clamav 0.24

  • Clam Anti-virus Clamav 0.51

  • Clam Anti-virus Clamav 0.52

  • Clam Anti-virus Clamav 0.53

  • Clam Anti-virus Clamav 0.54

  • Clam Anti-virus Clamav 0.60

  • Clam Anti-virus Clamav 0.60p

  • Clam Anti-virus Clamav 0.65

  • Clam Anti-virus Clamav 0.67

  • Clam Anti-virus Clamav 0.68

  • Clam Anti-virus Clamav 0.68.1

  • Clam Anti-virus Clamav 0.70

  • Clam Anti-virus Clamav 0.71

  • Clam Anti-virus Clamav 0.72

  • Clam Anti-virus Clamav 0.73

  • Clam Anti-virus Clamav 0.74

  • Clam Anti-virus Clamav 0.75

  • Clam Anti-virus Clamav 0.75.1

  • Clam Anti-virus Clamav 0.80

  • Clam Anti-virus Clamav 0.80 Rc1

  • Clam Anti-virus Clamav 0.80 Rc2

  • Clam Anti-virus Clamav 0.80 Rc3

  • Clam Anti-virus Clamav 0.80 Rc4

  • Clam Anti-virus Clamav 0.81

  • Clam Anti-virus Clamav 0.81 Rc1

  • Clam Anti-virus Clamav 0.82

  • Clam Anti-virus Clamav 0.83

  • Clam Anti-virus Clamav 0.84

  • Clam Anti-virus Clamav 0.84 Rc1

  • Clam Anti-virus Clamav 0.84 Rc2

  • Clam Anti-virus Clamav 0.85

  • Clam Anti-virus Clamav 0.85.1

  • Clam Anti-virus Clamav 0.86

  • Clam Anti-virus Clamav 0.86 Rc1

  • Clam Anti-virus Clamav 0.86.1

  • Clam Anti-virus Clamav 0.86.2

  • Clam Anti-virus Clamav 0.87

  • Clam Anti-virus Clamav 0.87.1

  • Clam Anti-virus Clamav 0.88

  • Clam Anti-virus Clamav 0.88.1

  • Clam Anti-virus Clamav 0.88.3

  • Clam Anti-virus Clamav 0.88.4

  • Clam Anti-virus Clamav 0.88.5

  • Clam Anti-virus Clamav 0.88.6

  • Clam Anti-virus Clamav 0.88.7

  • Clam Anti-virus Clamav 0.90

  • Clam Anti-virus Clamav 0.90 Rc1.1

  • Clam Anti-virus Clamav 0.90 Rc2

  • Clam Anti-virus Clamav 0.90 Rc3

  • Clam Anti-virus Clamav 0.90.1

  • Clam Anti-virus Clamav 0.90.2

  • Clam Anti-virus Clamav 0.90rc1

  • Clam Anti-virus Clamav 0.91

  • Clam Anti-virus Clamav 0.91.1

  • Clam Anti-virus Clamav 0.91.2

  • Clam Anti-virus Clamav 0.91rc1

  • Clam Anti-virus Clamav 0.91rc2

  • Clam Anti-virus Clamav 0.92

  • Clam Anti-virus Clamav 0.92.1


References

CERT - TA08-260A

CONFIRM - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=541

VUPEN - ADV-2008-2584

CONFIRM - http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html

GENTOO - GLSA-200805-19

SECUNIA - 31882

SECUNIA - 31576

APPLE - APPLE-SA-2008-09-15

XF - clamav-rar-weak-security(41874)

BID - 28784

MANDRIVA - MDVSA-2008:088

SECUNIA - 30328

SECUNIA - 29891

SUSE - SUSE-SA:2008:024

Related Patches

Apple 2008-09-15 Security Update 2008-006 (PPC)

Apple 2008-09-15 Security Update 2008-006 Server (PPC)

Apple 2008-09-15 Mac OS X 10.5.5 Update

Apple 2008-09-15 Mac OS X Server 10.5.5 Combo Update

Apple 2008-09-15 Mac OS X Server 10.5.5 Update

Apple 2008-09-15 Security Update 2008-006 (Intel)

Apple 2008-09-15 Mac OS X 10.5.5 Combo Update

Apple 2008-09-15 Security Update 2008-006 Server (Intel)


Last Updated: 27 May 2016 10:47:40