CVE-2006-6406
CVE-2006-6406
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.
EPSS 3.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.securityfocus.com/bid/21461
- http://kolab.org/security/kolab-vendor-notice-14.txt
- http://secunia.com/advisories/23460
- http://www.vupen.com/english/advisories/2006/4948
- http://www.debian.org/security/2006/dsa-1238
- http://www.novell.com/linux/security/advisories/2006_78_clamav.html
- http://www.securityfocus.com/archive/1/453654/100/0/threaded
- http://secunia.com/advisories/23379
- http://www.quantenblog.net/security/virus-scanner-bypass
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:230
- http://www.vupen.com/english/advisories/2006/5113
- http://secunia.com/advisories/23411
- http://secunia.com/advisories/23362
- https://nvd.nist.gov/vuln/detail/CVE-2006-6406