CVE-2007-6595
published 2007-12-31CVE-2007-6595: ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in…
PriorityP49low2.1CVSS 2.0
AVLACLAuNCNIPAN
EPSS
0.41%
32.4th percentile
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| clam_anti-virus | clamav | — | — |
| clamav | clamav | >= 0 < 0.92.1~dfsg-1 | 0.92.1~dfsg-1 |
| clamav | clamav | >= 0 < 0.92.1~dfsg-1 | 0.92.1~dfsg-1 |
| clamav | clamav | >= 0 < 0.92.1~dfsg-1 | 0.92.1~dfsg-1 |
| clamav | clamav | >= 0 < 0.92.1~dfsg-1 | 0.92.1~dfsg-1 |
| debian | clamav | < clamav 0.92.1~dfsg-1 (bookworm) | clamav 0.92.1~dfsg-1 (bookworm) |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
osv2.1LOW
vendor_debian2.1LOW
vendor_redhat2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cmgp-37ph-2ph7: ClamAV 0
ghsa_unreviewed·2022-05-01
CVE-2007-6595 [LOW] CWE-59 GHSA-cmgp-37ph-2ph7: ClamAV 0
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.
OSV
CVE-2007-6595: ClamAV 0
osv·2007-12-31·CVSS 2.1
CVE-2007-6595 [LOW] CVE-2007-6595: ClamAV 0
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.
Debian
CVE-2007-6595: clamav - ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack...
vendor_debian·2007·CVSS 2.1
CVE-2007-6595 [LOW] CVE-2007-6595: clamav - ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack...
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.
Scope: local
bookworm: resolved (fixed in 0.92.1~dfsg-1)
bullseye: resolved (fixed in 0.92.1~dfsg-1)
forky: resolved (fixed in 0.92.1~dfsg-1)
sid: resolved (fixed in 0.92.1~dfsg-1)
trixie: resolved (fixed in 0.92.1~dfsg-1)
Red Hat
clamav insecure /tmp file use
vendor_redhat·CVSS 2.1
CVE-2007-6595 [LOW] clamav insecure /tmp file use
clamav insecure /tmp file use
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.
No detection rules found.
No public exploits indexed.
http://kolab.org/security/kolab-vendor-notice-19.txthttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.htmlhttp://secunia.com/advisories/28949http://secunia.com/advisories/29891http://secunia.com/advisories/31437http://security.gentoo.org/glsa/glsa-200808-07.xmlhttp://securityreason.com/securityalert/3501http://securitytracker.com/id?1019148http://www.debian.org/security/2008/dsa-1497http://www.mandriva.com/security/advisories?name=MDVSA-2008:088http://www.securityfocus.com/archive/1/485631/100/0/threadedhttp://www.securityfocus.com/bid/27064http://www.vupen.com/english/advisories/2008/0606https://exchange.xforce.ibmcloud.com/vulnerabilities/39335https://exchange.xforce.ibmcloud.com/vulnerabilities/39339http://kolab.org/security/kolab-vendor-notice-19.txthttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.htmlhttp://secunia.com/advisories/28949http://secunia.com/advisories/29891http://secunia.com/advisories/31437http://security.gentoo.org/glsa/glsa-200808-07.xmlhttp://securityreason.com/securityalert/3501http://securitytracker.com/id?1019148http://www.debian.org/security/2008/dsa-1497http://www.mandriva.com/security/advisories?name=MDVSA-2008:088http://www.securityfocus.com/archive/1/485631/100/0/threadedhttp://www.securityfocus.com/bid/27064http://www.vupen.com/english/advisories/2008/0606https://exchange.xforce.ibmcloud.com/vulnerabilities/39335https://exchange.xforce.ibmcloud.com/vulnerabilities/39339
2007-12-31
Published