ID CVE-2005-0133
Summary ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.
References
Vulnerable Configurations
  • cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 10-09-2008 - 19:35)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
conectiva CLA-2005:928
confirm http://sourceforge.net/project/shownotes.php?release_id=300116
gentoo GLSA-200501-46
mandrake MDKSA-2005:025
trustix 2005-0003
Last major update 10-09-2008 - 19:35
Published 02-05-2005 - 04:00
Last modified 10-09-2008 - 19:35
Back to Top