----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Clam AntiVirus on Mac OS X Privilege Escalation Vulnerability

SECUNIA ADVISORY ID:
SA15542

VERIFY ADVISORY:
http://secunia.com/advisories/15542/

CRITICAL:
Not critical

IMPACT:
Privilege escalation

WHERE:
Local system

OPERATING SYSTEM:
Apple Macintosh OS X
http://secunia.com/product/96/

SOFTWARE:
Clam AntiVirus (clamav) 0.x
http://secunia.com/product/2538/

DESCRIPTION:
Tim Morgan and Kevin Amorin have reported a vulnerability in Clam
AntiVirus, which potentially can be exploited by malicious, local
users to gain escalated privileges.

The vulnerability is caused due to an input validation error in the
"filecopy()" function in shared/misc.c when executing the external
"ditto" utility. This can be exploited to execute arbitrary commands
with the privileges of the Clam AntiVirus process via an infected
file with a specially crafted filename containing shell
meta-characters.

Successful exploitation requires that Clam AntiVirus has been
configured to move files to a quarantine and that the move fails.

The vulnerability only affects Mac OS X systems.

SOLUTION:
Update to version 0.84 or later.

PROVIDED AND/OR DISCOVERED BY:
Tim Morgan and Kevin Amorin

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------