RCE in Clam Anti-Virus Clamav
CVE-2007-4560
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.6 (High). Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.835 (99.7th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.835 · newest: 0.835 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
- Strikoder-Premium/sendmail-clamav-exploit-CVE-2007-4560
- strikoder/sendmail-clamav-exploit-CVE-2007-4560
- STK-Security/sendmail-clamav-exploit-CVE-2007-4560
- 0x1sac/ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution
- rapid7/metasploit-framework
- Sic4rio/-Sendmail-with-clamav-milter-0.91.2---Remote-Command-Execution
- ARPSyndicate/cve-scores
- ARPSyndicate/cvemon
- Mr-Tree-S/POC_
References
- security.gentoo.org/glsa/glsa-200709-14.xml (vendor-advisory)
- securityreason.com/securityalert/3063 (third-party-advisory)
- secunia.com/advisories/26822 (Vendor Advisory, third-party-advisory)
- secunia.com/advisories/26916 (Vendor Advisory, third-party-advisory)
- www.securityfocus.com/archive/1/477723/100/0/threaded (mailing-list)
- secunia.com/advisories/26683 (Vendor Advisory, third-party-advisory)
- www.nruns.com/security_advisory_clamav_remote_code_exection.php (Patch)
- www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.html (vendor-advisory)
- www.debian.org/security/2007/dsa-1366 (vendor-advisory)
- www.vupen.com/english/advisories/2008/0924/references (vdb-entry)
Frequently asked questions
- What is CVE-2007-4560?
- CVE-2007-4560 is a vulnerability in Clam Anti-Virus Clamav, classified under OS Command Injection. Published 2007-08-28.
- Is CVE-2007-4560 known to be exploited?
- 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.