CVE-2004-1876

Fixed in a distro release EPSS <1%

The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.

Published 2005-05-10 · CVE record · OSV

Products: clam_anti-virus clamav

Distro releases