CVE-2006-1989
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0...
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
- Record
CVE-2006-1989- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
- Record
CVE-2006-1989- Updated
- 2026-11-02
EUVDEUVD-2006-1989 No score
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
- Record
EUVD-2006-1989- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-66xq-fpgf-chwg No score
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0...
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
- Record
GHSA-66xq-fpgf-chwg- Updated
- 2026-11-02
OSV No score
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
- Record
CVE-2006-1989- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1989 No score
Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.
- Record
DEBIAN-CVE-2006-1989- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10685-1 No score
clamav-0.103.3-1.4 on GA media
These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10685-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavDebian:12 |
before 0.88.2 | 0.88.2 |
clamavDebian:13 |
before 0.88.2 | 0.88.2 |
clamavDebian:14 |
before 0.88.2 | 0.88.2 |
clamavDebian:3.1 |
before 0.84-2.sarge.9, plus listed versions 0.84-20.84-2.sarge.10.84-2.sarge.20.84-2.sarge.30.84-2.sarge.4 Show 4 moreShow less0.84-2.sarge.50.84-2.sarge.60.84-2.sarge.70.84-2.sarge.8 |
0.84-2.sarge.9 |
clamavopenSUSE:Tumbleweed From an advisory covering 55 CVEs |
before 0.103.3-1.4 | 0.103.3-1.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1989 is a medium vulnerability (CVSS 5.1) in Clam Anti-virus Clamav, published May 1, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.95%, the 93rd percentile. Fixed in clamav 0.88.2.
References
lists.apple.com/archives/security-announce/2006/Jun/msg00000.html
secunia.com/advisories/20159
mandriva.com/security/advisories?name=MDKSA-2006:080
kb.cert.org/vuls/id/599220
vupen.com/english/advisories/2006/1586
Show 76 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/26182
securitytracker.com/id?1016392
trustix.org/errata/2006/0024
novell.com/linux/security/advisories/2006_05_05.html
clamav.net/security/0.88.2.html
kolab.org/security/kolab-vendor-notice-09.txt
osvdb.org/25120
lists.suse.com/archive/suse-security-announce/2006-May/0004.html
debian.org/security/2006/dsa-1050
gentoo.org/security/en/glsa/glsa-200605-03.xml
securityfocus.com/bid/17754
nvd.nist.gov/vuln/detail/CVE-2006-1989
github.com/advisories/GHSA-66xq-fpgf-chwg
security-tracker.debian.org/tracker/CVE-2006-1989
suse.com/security/cve/CVE-2005-3239