CVE-2007-6595: clam_anti-virus clamav Link Following

Vulnerability summary

CVE-2007-6595 is a low (CVSS 2.1) Link Following vulnerability in clam_anti-virus clamav. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 33.3% of scored vulnerabilities.

Timeline

1. 31-12-2007
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.

• CWE-59Improper Link Resolution Before File Access ('Link Following')The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.