CVE-2006-2427: High severity Clam Anti-Virus clamav vulnerability
freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2427?
CVE-2006-2427 is considered a medium severity vulnerability due to its potential for local information disclosure.
How do I fix CVE-2006-2427?
To mitigate CVE-2006-2427, update to the latest version of ClamAV or ClamXav that addresses this privilege escalation issue.
Who is affected by CVE-2006-2427?
CVE-2006-2427 affects users of ClamAV version 0.88 and ClamXav version 1.0.3h and earlier.
What type of vulnerability is CVE-2006-2427?
CVE-2006-2427 is a local privilege escalation vulnerability allowing users to read arbitrary files.
Is CVE-2006-2427 exploitable?
Yes, CVE-2006-2427 can be exploited by local users to read sensitive information through error messages.