S-274: ClamAV Vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-274: ClamAV Vulnerabilities
# 1  
Old 04-25-2008
S-274: ClamAV Vulnerabilities

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit which could lead to the execution of arbitrary code. The risk is MEDIUM. A buffer overflow inthe handler for PeSpin or Upack PE binaries may lead the the execution of arbitrary code.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Script for clamav help

Hi there all, I am writing a script to run clamscan and email me the results, everything is working fine still it comes to mailing me the results. Any and all help is much welcomed. #!/bin/sh # # Script Written by Jonathan Wood # Varables to change mailrecp="mail@home.jwservices.co.nz" ... (4 Replies)
Discussion started by: jonnowood
4 Replies

2. UNIX and Linux Applications

ClamAV/other AV. Possible to make portable?

Hey guys/gals, I work with a large amount of servers, and was just curious if it is possible to make a linux AV app, portable. What i mean is, I go to a user's home directory and do something like ./clamavscan (I suppose an alias for clamscan..), and it scans the user's home directory for... (2 Replies)
Discussion started by: Rhije
2 Replies
Login or Register to Ask a Question
Clamd client(1) 						  Clam AntiVirus						   Clamd client(1)

NAME
clamdscan - scan files and directories for viruses using Clam AntiVirus Daemon SYNOPSIS
clamdscan [options] [file/directory] DESCRIPTION
clamdscan is a clamd client which may be used as a clamscan replacement. It accepts all the options implemented in clamscan but most of them will be ignored because its scanning abilities only depend on clamd. OPTIONS
-h, --help Display help information and exit. -V, --version Print version number and exit. -v, --verbose Be verbose. --quiet Be quiet - only output error messages. --stdout Write all messages (except for libclamav output) to the standard output (stdout). --config-file=FILE Read clamd settings from FILE. -l FILE, --log=FILE Save the scan report to FILE. -f FILE, --file-list=FILE Scan files listed line by line in FILE. -m, --multiscan In the multiscan mode clamd will attempt to scan the directory contents in parallel using available threads. This option is espe- cially useful on multiprocessor and multi-core systems. If you pass more than one file or directory in the command line, they are put in a queue and sent to clamd individually. This means, that single files are always scanned by a single thread. Similarly, clamdscan will wait for clamd to finish a directory scan (performed in multiscan mode) before sending request to scan another direc- tory. This option can be combined with --fdpass (see below). -z, --allmatch After a match, continue scanning within the file for additional matches. --remove Remove infected files. Be careful. --move=DIRECTORY Move infected files into DIRECTORY. --no-summary Do not display summary at the end of scanning. --reload Request clamd to reload virus database. --fdpass Pass the file descriptor permissions to clamd. This is useful if clamd is running as a different user as it is faster than streaming the file to clamd. Only available if connected to clamd via local(unix) socket. --stream Forces file streaming to clamd. This is generally not needed as clamdscan detects automatically if streaming is required. This option only exists for debugging and testing purposes, in all other cases --fdpass is preferred. EXAMPLES
(0) To scan a one file: clamdscan file (1) To scan a current working directory: clamdscan (2) To scan all files in /home: clamdscan /home (3) To scan a file when clamd is running as a different user: clamdscan --fdpass ~/downloads (4) To scan from standard input: clamdscan - < file_to_scan cat file_to_scan | clamdscan - RETURN CODES
0 : No virus found. 1 : Virus(es) found. 2 : An error occured. CREDITS
Please check the full documentation for credits. AUTHOR
Tomasz Kojm <tkojm@clamav.net> SEE ALSO
clamd(8), clamd.conf(5), clamscan(1) ClamAV 0.98.4 February 12, 2009 Clamd client(1)