>> ClamAV MIME Header Directory Traversal and CAB File Denial of Service Vulnerabilities
Title : ClamAV MIME Header Directory Traversal and CAB File Denial of Service Vulnerabilities VUPEN ID : VUPEN/ADV-2007-0623 CVE ID : CVE-2007-0897 - CVE-2007-0898
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-02-15
Technical Description
Two vulnerabilities have been identified in Clam AntiVirus (ClamAV), which could be exploited by attackers or malware to cause a denial or bypass security restrictions.
The first issue is due to an input validation error when parsing multipart messages with a header containing a specially crafted "id" parameter, which could be exploited by malware to overwrite certain files (e.g. the virus database) via a directory traversal attack and bypass security checks.
The second vulnerability is due to a file descriptor leak when processing CAB files with a record length of zero, which could be exploited by attackers or malware to prevent a vulnerable application from scanning certain archives (e.g. ZIP or TAR) via a specially crafted cabinet file.
