NVD

Id
56680  
Name
CVE-2007-4560  
Description
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-27  
Modified Date
2011-03-07  
Seq
2007-4560  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288822 56680 CVE-2007-4560 http://docs.info.apple.com/article.html?artnum=307562  View
288823 56680 CVE-2007-4560 APPLE-SA-2008-03-18  View
288824 56680 CVE-2007-4560 GLSA-200709-14  View
288825 56680 CVE-2007-4560 3063  View
288826 56680 CVE-2007-4560 DSA-1366  View
288827 56680 CVE-2007-4560 MDKSA-2007:172  View
288828 56680 CVE-2007-4560 SUSE-SR:2007:018  View
288829 56680 CVE-2007-4560 http://www.nruns.com/security_advisory_clamav_remote_code_exection.php  View
288830 56680 CVE-2007-4560 20070824 n.runs-SA-2007.025 - ClamAV Remote Code Execution Advisory  View
288831 56680 CVE-2007-4560 25439  View
288832 56680 CVE-2007-4560 1018610  View
288833 56680 CVE-2007-4560 2007-0026  View
288834 56680 CVE-2007-4560 ADV-2008-0924  View
288835 56680 CVE-2007-4560 FEDORA-2007-2050  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52456 JVNDB-2007-001148 ClamAV の clamav-milter における任意のコマンドを実行される脆弱性 ClamAV の clamav-milter には、black-hole モードで動作している場合、popen() の呼び出しで使用する、シェルメタキャラクタの取り扱いに不備があり、任意のコマンドを実行される脆弱性が存在します。 CVE-2007-4560 27915 CVE-2007-4560 56680 7.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001148.html 2007-08-27 2008-04-11 View