RCE in Clam_anti-virus Clamav
CVE-2007-4560
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.835 (99.7th percentile) — read the EPSS interpretation.
Affected products
- Clam_anti-virus Clamav
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
- Strikoder-Premium/sendmail-clamav-exploit-CVE-2007-4560
- strikoder/sendmail-clamav-exploit-CVE-2007-4560
- STK-Security/sendmail-clamav-exploit-CVE-2007-4560
- 0x1sac/ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution
- rapid7/metasploit-framework
- Sic4rio/-Sendmail-with-clamav-milter-0.91.2---Remote-Command-Execution
- ARPSyndicate/cve-scores
- ARPSyndicate/cvemon
- Mr-Tree-S/POC_
References
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
Frequently asked questions
- What is CVE-2007-4560?
- CVE-2007-4560 is a vulnerability in Clam_anti-virus Clamav, classified under OS Command Injection. Published 2007-08-28.
- Is CVE-2007-4560 known to be exploited?
- 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.