Threats tagged 'ghsa-h5fr-q576-q7rv'

A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and earlier, including all 1.2.x, 1.0.6 and earlier, 0.105.x, 0.104.x, and 0.103.11 and prior versions, allows an authenticated local attacker to corrupt critical system files. The flaw arises because ClamD writes to its log file with elevated privileges without verifying if the log file is a symbolic link. An attacker who replaces the log file with a symlink to a critical system file and then restarts ClamD can cause corruption by appending log messages to that file.