S-093: ClamAV Vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-093: ClamAV Vulnerabilities
# 1  
Old 12-24-2007
S-093: ClamAV Vulnerabilities

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The risk is MEDIUM. May lead to the execution of arbitrary code.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Script for clamav help

Hi there all, I am writing a script to run clamscan and email me the results, everything is working fine still it comes to mailing me the results. Any and all help is much welcomed. #!/bin/sh # # Script Written by Jonathan Wood # Varables to change mailrecp="mail@home.jwservices.co.nz" ... (4 Replies)
Discussion started by: jonnowood
4 Replies

2. UNIX and Linux Applications

ClamAV/other AV. Possible to make portable?

Hey guys/gals, I work with a large amount of servers, and was just curious if it is possible to make a linux AV app, portable. What i mean is, I go to a user's home directory and do something like ./clamavscan (I suppose an alias for clamscan..), and it scans the user's home directory for... (2 Replies)
Discussion started by: Rhije
2 Replies
Login or Register to Ask a Question
sigtool(1)							  Clam AntiVirus							sigtool(1)

NAME
sigtool - signature and database management tool SYNOPSIS
sigtool [options] DESCRIPTION
sigtool can be used to generate MD5 checksums, convert data into hexadecimal format, list virus signatures and build/unpack/test/verify CVD databases and update scripts. OPTIONS
-h, --help Output help information and exit. -V, --version Print version number and exit. --quiet Be quiet - output only error messages. --stdout Write all messages to stdout. --hex-dump Read data from stdin and write hex string to stdout. --md5 [FILES] Generate MD5 checksum from stdin or MD5 sigs for FILES. --mdb [FILES] Generate .mdb signatures for FILES. --html-normalise=FILE Create normalised HTML files comment.html, nocomment.html, and script.html in current working directory. --utf16-decode=FILE Decode UTF16 encoded data. --vba=FILE Extract VBA/Word6 macros from given MS Office document. --vba-hex=FILE Extract Word6 macros from given MS Office document and display the corresponding hex values. -i, --info Print a CVD information and verify MD5 and a digital signature. -b, --build Build a CVD file. -s, --server is required. --server ClamAV Signing Service address (for virus database maintainers only). --unpack FILE, -u FILE Unpack FILE (CVD) to a current directory. --unpack-current Unpack a local CVD file (main or daily) to current directory. --diff=OLD NEW, -d OLD NEW Create a diff file for OLD and NEW CVDs/INCDIRs. --run-cdiff=FILE, -r FILE Execute update script FILE in current directory. --verify-cdiff=FILE, -r FILE Verify DIFF against CVD/INCDIR. -l[FILE], --list-sigs[=FILE] List all signature names from the local database directory (default) or from FILE. -fREGEX, --find-sigs=REGEX Find and display signatures from the local database directory which match the given REGEX. The whole signature body (name, hex string, etc.) is checked. -fREGEX, --decode-sigs=REGEX Decode signatures read from the standard input (eg. piped from --find-sigs) -fREGEX, --test-sigs=DATABASE TARGET_FILE Test all signatures from DATABASE against TARGET_FILE. EXAMPLES
Generate hex string from testfile and save it to testfile.hex: cat testfile | sigtool --hex-dump > testfile.hex CREDITS
Please check the full documentation for credits. AUTHOR
Tomasz Kojm <tkojm@clamav.net> SEE ALSO
freshclam(1), freshclam.conf(5) ClamAV 0.96.1 February 12, 2007 sigtool(1)