ГлавнаяБаза уязвимостей БДУ → BDU:2015-00786
5средняя

BDU:2015-00786 (CVE-2008-2713)

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации
Опубликовано: 2016-07-06
Описание

Множественные уязвимости пакета libclamav-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Затрагиваемое ПО и версии
Debian GNU/Linux (до 4)
Способ устранения

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
clamav-milter - 0.90.1dfsg-3.1+etch14
clamav-freshclam - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
clamav - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
clamav-daemon - 0.90.1dfsg-3.1+etch14
s390x:
clamav - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
clamav-freshclam - 0.90.1dfsg-3.1+etch14
clamav-daemon - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
i686:
clamav-daemon - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
clamav - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
clamav-freshclam - 0.90.1dfsg-3.1+etch14
hppa:
clamav-daemon - 0.90.1dfsg-3.1+etch14
clamav-freshclam - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
clamav - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
sparc:
clamav - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
clamav-freshclam - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
clamav-daemon - 0.90.1dfsg-3.1+etch14
x86-64:
libclamav2 - 0.90.1dfsg-3.1+etch14
clamav - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
clamav-daemon - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
clamav-freshclam - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
alpha:
clamav-daemon - 0.90.1dfsg-3.1+etch14
clamav-freshclam - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
clamav - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
ia64:
clamav-freshclam - 0.90.1dfsg-3.1+etch14
clamav - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
clamav-daemon - 0.90.1dfsg-3.1+etch14
mips:
clamav-freshclam - 0.90.1dfsg-3.1+etch14
clamav-daemon - 0.90.1dfsg-3.1+etch14
clamav - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
noarch:
clamav-docs - 0.90.1dfsg-3.1+etch14
clamav-testfiles - 0.90.1dfsg-3.1+etch14
clamav-base - 0.90.1dfsg-3.1+etch14
mipsel:
clamav - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
clamav-freshclam - 0.90.1dfsg-3.1+etch14
clamav-daemon - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
arm:
clamav-daemon - 0.90.1dfsg-3.1+etch14
clamav-freshclam - 0.90.1dfsg-3.1+etch14
libclamav2 - 0.90.1dfsg-3.1+etch14
clamav - 0.90.1dfsg-3.1+etch14
libclamav-dev - 0.90.1dfsg-3.1+etch14
clamav-milter - 0.90.1dfsg-3.1+etch14
clamav-dbg - 0.90.1dfsg-3.1+etch14

Оценка CVSS
Балл5 — средняя опасность
Источники и патчи
http://www.debian.org/security/dsa-1616/http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2713http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3215
Проверьте безопасность своего сайта и почты → Полная проверка домена