CVE-2007-4560

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 84%

from disclosure to weapon0 days

Published on NVDAug 28

1st PoCAug 24

metasploitAug 24

exploitation probability

84%top 1% of all CVEs

observed exploitation

nono source reports it

5 public exploit(s)

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."

Affected products

n/a · n/a

public PoCs found — 5

githubgithub.com/Strikoder-Premium/sendmail-clamav-exploit-CVE-2007-4560★ 4 githubgithub.com/0x1sac/ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution★ 0 exploitdbwww.exploit-db.com/exploits/16924unverified exploitdbwww.exploit-db.com/exploits/9913unverified exploitdbwww.exploit-db.com/exploits/4761unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://docs.info.apple.com/article.html?artnum=307562 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html http://secunia.com/advisories/26654 http://secunia.com/advisories/26674 http://secunia.com/advisories/26683 http://secunia.com/advisories/26751 http://secunia.com/advisories/26822 http://secunia.com/advisories/26916 http://secunia.com/advisories/29420 http://security.gentoo.org/glsa/glsa-200709-14.xml http://securityreason.com/securityalert/3063 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.html