The remote host is missing an update to clamav announced via advisory DSA 737-1. A number of potential remote DOS vulnerabilities have been identified in ClamAV. In addition to the four issues identified by CVE ID above, there are fixes for issues in libclamav/cvd.c and libclamav/message.c. Together, these issues could allow a carefully crafted message to crash a ClamAV scanner or exhaust various resources on the machine running the scanner.

For the stable distribution (sarge), these problems have been fixed in version 0.84-2.sarge.1. We recommend that you upgrade your clamav package. https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20737-1