CVE-2007-0898
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote...
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
- Record
CVE-2007-0898- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
- Record
CVE-2007-0898- Updated
- 2026-11-02
EUVDEUVD-2007-0894 No score
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
- Record
EUVD-2007-0894- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9298-v2wf-r563 No score
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote...
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
- Record
GHSA-9298-v2wf-r563- Weakness
- CWE-22
- Updated
- 2026-11-02
OSV No score
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
- Record
CVE-2007-0898- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-0898 No score
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
- Record
DEBIAN-CVE-2007-0898- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10685-1 No score
clamav-0.103.3-1.4 on GA media
These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10685-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavDebian:12 |
before 0.90-1 | 0.90-1 |
clamavDebian:13 |
before 0.90-1 | 0.90-1 |
clamavDebian:14 |
before 0.90-1 | 0.90-1 |
clamavDebian:3.1 From an advisory covering 3 CVEs |
before 0.84-2.sarge.15, plus listed versions 0.84-20.84-2.sarge.10.84-2.sarge.100.84-2.sarge.110.84-2.sarge.12 Show 10 moreShow less0.84-2.sarge.130.84-2.sarge.140.84-2.sarge.20.84-2.sarge.30.84-2.sarge.40.84-2.sarge.50.84-2.sarge.60.84-2.sarge.70.84-2.sarge.80.84-2.sarge.9 |
0.84-2.sarge.15 |
clamavopenSUSE:Tumbleweed From an advisory covering 55 CVEs |
before 0.103.3-1.4 | 0.103.3-1.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0898 is a medium vulnerability (CVSS 6.4) in Clam Anti-virus Clamav, published February 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.88%, the 90th percentile. Fixed in clamav 0.90-1.
References
exchange.xforce.ibmcloud.com/vulnerabilities/32535
secunia.com/advisories/24187
securityfocus.com/bid/22581
vupen.com/english/advisories/2008/0924/references
debian.org/security/2007/dsa-1263
Show 72 moreShow less
securitytracker.com/id?1017660
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
lists.suse.com/archive/suse-security-announce/2007-Feb/0004.html
security.gentoo.org/glsa/glsa-200703-03.xml
mandriva.com/security/advisories?name=MDKSA-2007:043
docs.info.apple.com/article.html?artnum=307562
osvdb.org/32282
labs.idefense.com/intelligence/vulnerabilities/display.php?id=476
nvd.nist.gov/vuln/detail/CVE-2007-0898
github.com/advisories/GHSA-9298-v2wf-r563
security-tracker.debian.org/tracker/CVE-2007-0898
suse.com/security/cve/CVE-2005-3239