CVE-2004-0270

ClamAV 0.65 - Denial of Service via Invalid UUEncoded Email Line Length

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-0270. PoCs published by Oliver Eikemeier.

AI-analyzed exploit summary This exploit demonstrates a denial-of-service (DoS) vulnerability in ClamAV by crafting a malformed UUEncoded message in an mbox file. The vulnerability triggers an assertion failure in the message parsing logic, causing the application to crash.

Description

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Oliver Eikemeier · textdoslinux

https://www.exploit-db.com/exploits/23667

View Code ZIP pw:eip

This exploit demonstrates a denial-of-service (DoS) vulnerability in ClamAV by crafting a malformed UUEncoded message in an mbox file. The vulnerability triggers an assertion failure in the message parsing logic, causing the application to crash.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: ClamAV (versions affected by CVE-2004-0270)

No auth needed

Prerequisites: Ability to deliver a crafted mbox file to the target system · ClamAV installed and configured to scan mbox files

MITRE ATT&CK