CVE-2007-0898: Path Traversal
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0898?
CVE-2007-0898 is classified as a critical vulnerability due to its potential to allow remote attackers to overwrite arbitrary files.
How do I fix CVE-2007-0898?
To fix CVE-2007-0898, upgrade ClamAV to version 0.90 or higher as it contains patches that address this vulnerability.
What are the affected versions for CVE-2007-0898?
Affected versions of ClamAV for CVE-2007-0898 include all versions prior to 0.90.
What type of vulnerability is CVE-2007-0898?
CVE-2007-0898 is a directory traversal vulnerability that exploits the handling of the id MIME header.
Who can be impacted by CVE-2007-0898?
Any user or organization using the affected versions of ClamAV may be at risk if they process malicious multi-part messages.