CVE-2005-1711: High severity cisco clamav vulnerability

Published May 24, 2005

Updated

Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected.

Affected Software

3 affected components

Clam Anti-Virus clamav=0.90.2

Gibraltar Gibraltar Firewall=2.2

Squid Squid=2.6.stable1

Remediation

Patch Available

http://securitytracker.com/id?1014030

Event History

May 24, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1711?

CVE-2005-1711 is classified as a moderate severity vulnerability affecting Gibraltar Firewall 2.2 and earlier.

How do I fix CVE-2005-1711?

To fix CVE-2005-1711, upgrade to Gibraltar Firewall version 2.3 or later, which addresses the ClamAV scanning issue.

What software is affected by CVE-2005-1711?

CVE-2005-1711 affects Gibraltar Firewall 2.2, ClamAV version 0.90.2, and Squid 2.6.stable1.

What is the impact of CVE-2005-1711?

The impact of CVE-2005-1711 is that it prevents ClamAV from detecting viruses due to a defunct scanning method.

Is there a patch for CVE-2005-1711?

There is no direct patch for CVE-2005-1711; the recommended solution is to upgrade to newer versions of the affected software.