Published: 10/12/2006 Updated: 17/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Clam AntiVirus (ClamAV) 0.88.6 allows remote malicious users to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
clam anti-virus clamav 0.88.6

Debian Bug report logs - #401873 Unusual MIME Encoding Content Filter Bypass Package: clamav; Maintainer for clamav is ClamAV Team <pkg-clamav-devel@listsaliothdebianorg>; Source for clamav is src:clamav (PTS, buildd, popcon) Reported by: Hendrik Weimer <hendrik@enyode> Date: Wed, 6 Dec 2006 14:48:08 UTC Severi ...

Debian Bug report logs - #401874 Multipart Nesting Denial of Service Package: clamav; Maintainer for clamav is ClamAV Team <pkg-clamav-devel@listsaliothdebianorg>; Source for clamav is src:clamav (PTS, buildd, popcon) Reported by: Hendrik Weimer <hendrik@enyode> Date: Wed, 6 Dec 2006 14:48:14 UTC Severity: impo ...

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-6406 Hendrik Weimer discovered that invalid characters in base64 encoded data may lead to bypass of scanning mechanisms CVE-2006-6481 Hendrik Weimer discovered ...

NVD-CWE-Other http://www.quantenblog.net/security/virus-scanner-bypass http://www.securityfocus.com/bid/21461 http://secunia.com/advisories/23362 http://kolab.org/security/kolab-vendor-notice-14.txt http://www.debian.org/security/2006/dsa-1238 http://www.novell.com/linux/security/advisories/2006_78_clamav.html http://secunia.com/advisories/23460 http://secunia.com/advisories/23379 http://secunia.com/advisories/23411 http://www.mandriva.com/security/advisories?name=MDKSA-2006:230 http://www.vupen.com/english/advisories/2006/4948 http://www.vupen.com/english/advisories/2006/5113 http://www.securityfocus.com/archive/1/453654/100/0/threaded https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=401873 https://www.debian.org/security/./dsa-1238

CVE-2006-6406

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect