Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-0898

Fixed in a distro release EPSS 4%

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.

Published 2007-02-16 · CVE record · OSV

Products: clam_anti-virus clamav

Distro releases

ReleasePackageFixed in
Debian 12clamav0.90-1
Debian 13clamav0.90-1
Debian 14clamav0.90-1
Debian 3.1clamav0.84-2.sarge.15
openSUSE Tumbleweedclamav0.103.3-1.4