CVE-2007-3024: Low severity Clam Anti-Virus clamav vulnerability
Published Jun 7, 2007
·Updated
libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files.
Affected Software
6 affected components
Clam Anti-Virus clamav=0.90
Clam Anti-Virus clamav=0.90.1
Clam Anti-Virus clamav=0.90.2
Clam Anti-Virus clamav=0.90_rc1.1
Clam Anti-Virus clamav=0.90_rc2
Clam Anti-Virus clamav=0.90_rc3
Remediation
Patch Available
Event History
Jun 7, 2007
CVE Published
10:30 PM
Jun 8, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3024?
CVE-2007-3024 is considered to have moderate severity due to the potential for local users to read sensitive files.
2
How do I fix CVE-2007-3024?
To fix CVE-2007-3024, upgrade to ClamAV version 0.90.3 or later.
3
What systems are affected by CVE-2007-3024?
CVE-2007-3024 affects ClamAV versions prior to 0.90.3 and specific pre-release versions.
4
What type of vulnerability is CVE-2007-3024?
CVE-2007-3024 is a local file permissions vulnerability that allows access to sensitive files.
5
What actions could an attacker take exploiting CVE-2007-3024?
An attacker could exploit CVE-2007-3024 to read sensitive files by leveraging insecure permissions on temporary files.