Kolab Server ClamAV Archive Handling Security Bypass
SECUNIA ADVISORY ID: SA37401
VERIFY ADVISORY: http://secunia.com/advisories/37401/
DESCRIPTION: Some security issues have been reported in Kolab Server, which can potentially be exploited by malware to bypass certain security restrictions.
The security issues are caused due to errors in the handling of certain file types in combination with ClamAV. This can be exploited to bypass security restrictions specified for certain files.
SOLUTION: Upgrade the ClamAV package to version 0.95.3. See vendor’s advisory for details.
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.
ORIGINAL ADVISORY: http://www.kolab.org/security/kolab-vendor-notice-25.txt
———————————————————————-