This host has ClamAV installed and is prone to multiple vulnerabilities.

Remote attackers may exploit this issue to inject malicious files into the system which can bypass the scan engine and may cause denial of service. Impact Level: System/Application

Upgrade to ClamAV 0.95 http://www.clamav.net

Multiple flaws are due to - Error in handling specially crafted RAR files which prevents the scanning of potentially malicious files. - Inadequate sanitation of files through a crafted TAR file causes clamd and clamscan to hang. - 'libclamav/pe.c' allows remote attackers to cause a denial of service via a crafted EXE which triggers a divide-by-zero error.

ClamAV before 0.95 on Linux

• http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.html
• http://www.openwall.com/lists/oss-security/2009/04/07/6
• http://www.vupen.com/english/advisories/2009/0934

---

Updated on 2015-03-25