Unrated severityNVD Advisory· Published Feb 16, 2007· Updated Apr 23, 2026
CVE-2007-0898
CVE-2007-0898
Description
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
Affected products
48cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*+ 47 more
- cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*range: <=0.88.6
- cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.81_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.86_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
20- labs.idefense.com/intelligence/vulnerabilities/display.phpnvdPatch
- secunia.com/advisories/24187nvdPatchVendor Advisory
- www.securityfocus.com/bid/22581nvdPatch
- secunia.com/advisories/24183nvdVendor Advisory
- secunia.com/advisories/24192nvdVendor Advisory
- secunia.com/advisories/24319nvdVendor Advisory
- secunia.com/advisories/24332nvdVendor Advisory
- secunia.com/advisories/24425nvdVendor Advisory
- docs.info.apple.com/article.htmlnvd
- lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlnvd
- lists.suse.com/archive/suse-security-announce/2007-Feb/0004.htmlnvd
- osvdb.org/32282nvd
- secunia.com/advisories/29420nvd
- security.gentoo.org/glsa/glsa-200703-03.xmlnvd
- www.debian.org/security/2007/dsa-1263nvd
- www.mandriva.com/security/advisoriesnvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/0623nvd
- www.vupen.com/english/advisories/2008/0924/referencesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/32535nvd
News mentions
0No linked articles in our index yet.