Upstream information
Description
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
| National Vulnerability Database | |
|---|---|
| Base Score | 7.6 |
| Vector | AV:N/AC:H/Au:N/C:C/I:C/A:C |
| Access Vector | Network |
| Access Complexity | High |
| Authentication | None |
| Confidentiality Impact | Complete |
| Integrity Impact | Complete |
| Availability Impact | Complete |
SUSE Security Advisories:
- SUSE-SR:2007:018, published Fri, 31 Aug 2007 15:00:00 +0000
SUSE Timeline for this CVE
CVE page created: Tue Jul 9 15:58:05 2013CVE page last modified: Fri Dec 8 16:22:16 2023