CVE

Id
26381  
CVE No.
CVE-2007-3024  
Status
Candidate  
Description
libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cli_gentempstream function in clamd/clamdscan, which might allow local users to read sensitive files.  
Phase
Assigned (20070604)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267180 26381 CVE-2007-3024 MLIST:[Clamav-announce] 20070530 announcing ClamAV 0.90.3  View
267181 26381 CVE-2007-3024 URL:http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html  View
267182 26381 CVE-2007-3024 CONFIRM:http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog  View
267183 26381 CVE-2007-3024 CONFIRM:https://wwws.clamav.net/bugzilla/show_bug.cgi?id=517  View
267184 26381 CVE-2007-3024 CONFIRM:http://kolab.org/security/kolab-vendor-notice-15.txt  View
267185 26381 CVE-2007-3024 DEBIAN:DSA-1320  View
267186 26381 CVE-2007-3024 URL:http://www.debian.org/security/2007/dsa-1320  View
267187 26381 CVE-2007-3024 GENTOO:GLSA-200706-05  View
267188 26381 CVE-2007-3024 URL:http://security.gentoo.org/glsa/glsa-200706-05.xml  View
267189 26381 CVE-2007-3024 SUSE:SUSE-SA:2007:033  View
267190 26381 CVE-2007-3024 URL:http://www.novell.com/linux/security/advisories/2007_33_clamav.html  View
267191 26381 CVE-2007-3024 BID:24358  View
267192 26381 CVE-2007-3024 URL:http://www.securityfocus.com/bid/24358  View
267193 26381 CVE-2007-3024 SECUNIA:25523  View
267194 26381 CVE-2007-3024 URL:http://secunia.com/advisories/25523  View
267195 26381 CVE-2007-3024 SECUNIA:25525  View
267196 26381 CVE-2007-3024 URL:http://secunia.com/advisories/25525  View
267197 26381 CVE-2007-3024 SECUNIA:25688  View
267198 26381 CVE-2007-3024 URL:http://secunia.com/advisories/25688  View
267199 26381 CVE-2007-3024 SECUNIA:25796  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55257 JVNDB-2007-003949 Panda Software AdminSecure における整数オーバーフローの脆弱性 Panda Software AdminSecure には、整数オーバーフローの脆弱性が存在します。 CVE-2007-3026 26381 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003949.html  View