CVE-2006-1989

Description (CNA)

Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html
• http://secunia.com/advisories/20159
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:080
• http://www.kb.cert.org/vuls/id/599220
• http://secunia.com/advisories/19963
• http://www.vupen.com/english/advisories/2006/1586
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26182
• http://securitytracker.com/id?1016392
• http://secunia.com/advisories/19964
• http://www.trustix.org/errata/2006/0024
• http://secunia.com/advisories/19912
• http://www.novell.com/linux/security/advisories/2006_05_05.html
• http://secunia.com/advisories/19880
• http://www.clamav.net/security/0.88.2.html
• http://kolab.org/security/kolab-vendor-notice-09.txt
• http://www.osvdb.org/25120
• http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html
• http://secunia.com/advisories/20117
• http://www.debian.org/security/2006/dsa-1050
• http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml
• http://secunia.com/advisories/20877
• http://www.vupen.com/english/advisories/2006/2566
• http://www.securityfocus.com/bid/17754
• http://secunia.com/advisories/19874

ADP enrichment