CVE-2006-2427 - CVE House
Back to Database
Status published High CVE-2006-2427

freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav...

Vulnerability Description

freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2427

Credits & Attribution

No credits recorded in the NVD database.

References

More from clam anti-virus

View All →
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows...
Medium 4.3
CVE-2008-5050
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus...
Critical 9.3
CVE-2008-3215
libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause...
Medium 5
CVE-2008-2713
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause...
Medium 5
CVE-2008-1837
libclamunrar in ClamAV before 0.93 allows remote attackers to cause...
Medium 5

Affected Vendor

clam anti-virus

View all reports →

Affected Software

clamav, clamxav
Vulnerable Versions:
0.88, 1.0.3h

Timeline

Official Publish: May 17th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.