Test ID:	1.3.6.1.4.1.25623.1.0.58472
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1340-1)
Summary:	The remote host is missing an update for the Debian 'clamav' package(s) announced via the DSA-1340-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'clamav' package(s) announced via the DSA-1340-1 advisory. Vulnerability Insight: A NULL pointer dereference has been discovered in the RAR VM of Clam Antivirus (ClamAV) which allows user-assisted remote attackers to cause a denial of service via a specially crafted RAR archives. We are currently unable to provide fixed packages for the MIPS architectures. Those packages will be installed in the security archive when they become available. The old stable distribution (sarge) is not affected by this problem. For the stable distribution (etch) this problem has been fixed in version 0.90.1-3etch4. For the unstable distribution (sid) this problem has been fixed in version 0.91-1. We recommend that you upgrade your clamav packages. Affected Software/OS: 'clamav' package(s) on Debian 4. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3725 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html Bugtraq: 20070711 Advisory - Clam AntiVirus RAR File Handling Denial Of Service Vulnerability. (Google Search) http://www.securityfocus.com/archive/1/473371/100/0/threaded Debian Security Information: DSA-1340 (Google Search) http://www.debian.org/security/2007/dsa-1340 http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064569.html http://security.gentoo.org/glsa/glsa-200708-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:150 http://www.metaeye.org/advisories/54 http://osvdb.org/36907 http://secunia.com/advisories/26038 http://secunia.com/advisories/26164 http://secunia.com/advisories/26209 http://secunia.com/advisories/26226 http://secunia.com/advisories/26231 http://secunia.com/advisories/26377 http://secunia.com/advisories/29420 SuSE Security Announcement: SUSE-SR:2007:015 (Google Search) http://www.novell.com/linux/security/advisories/2007_15_sr.html http://www.trustix.org/errata/2007/0023/ http://www.vupen.com/english/advisories/2007/2509 http://www.vupen.com/english/advisories/2007/2643 http://www.vupen.com/english/advisories/2008/0924/references XForce ISS Database: clamav-rarvm-dos(35367) https://exchange.xforce.ibmcloud.com/vulnerabilities/35367
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.