NVD

Id
61126  
Name
CVE-2006-2427  
Description
freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-05-17  
Modified Date
2011-03-07  
Seq
2006-2427  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315831 61126 CVE-2006-2427 912  View
315832 61126 CVE-2006-2427 1016086  View
315833 61126 CVE-2006-2427 http://www.digitalmunition.com/DMA[2006-0514a].txt  View
315834 61126 CVE-2006-2427 20060515 DMA[2006-0514a] - "ClamAV freshclam incorrect privilege drop"  View
315835 61126 CVE-2006-2427 ADV-2006-1807  View
315836 61126 CVE-2006-2427 clamxav-freshclam-insecure-privileges(26453)  View

Related JVN