The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Clam Antivirus Code Execution Vulnerability
------------------------------------------------------------------------
SUMMARY
Clam AntiVirus is "a GPL anti-virus toolkit for UNIX. The main purpose of
this software is the integration with mail servers (attachment scanning)".
The following vulnerability allows remote attackers to execute arbitrary
code on vulnerable ClamAV installations.
DETAILS
Vulnerable Systems:
* Clam AntiVirus versions 0.80 through 0.87
Immune Systems:
* Clam AntiVirus versions 0.87.1 available from
<http://sourceforge.net/project/showfiles.php?group_id=86638> here
This specific flaw exists within libclamav/fsg.c during the unpacking of
executable files compressed with FSG v1.33. Due to invalid bounds checking
when copying user-supplied data to heap allocated memory, an exploitable
memory corruption condition is created. The unpacking algorithm for other
versions of FSG is not affected.
Disclosure Timeline:
24.10.05 - Vulnerability reported to vendor
24.10.05 - Digital Vaccine released to TippingPoint customers
25.10.05 - Vulnerability information provided to ZDI security partners
04.11.05 - Public release of advisory
ADDITIONAL INFORMATION
The original article can be found at:
<http://www.zerodayinitiative.com/advisories/ZDI-05-002.html>
http://www.zerodayinitiative.com/advisories/ZDI-05-002.html
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
