CVE:CVE-2007-0898
CNNVD:CNNVD-200702-338
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。
ClamAV在解析从MIME头获取的id参数字符串时存在目录遍历漏洞，远程攻击者可能利用此漏洞对ClamAV系统执行拒绝服务攻击。
在解析多部分消息时ClamAV使用上述字符串创建本地文件，如果攻击者发送了类似于"../../../../some/file"的字符串的话就可以创建或覆盖clamd进程所有的任意文件，之后将消息体中的数据写入到这个文件中。成功利用这个漏洞可能导致降低ClamAV病毒扫描服务的性能。
solution:Upgrade clam_anti-virus clamav to a higher version than 0.88.6,0.15,0.20,0.21,0.22,0.23,0.24,0.51,0.52,0.53,0.54,0.60,0.60p,0.65,0.67,0.68,0.68.1,0.70,0.71,0.72,0.73,0.74,0.75,0.75.1,0.80,0.80_rc1,0.80_rc2,0.80_rc3,0.80_rc4,0.81,0.81_rc1,0.82,0.83,0.84,0.84_rc1,0.84_rc2,0.85,0.85.1,0.86,0.86.1,0.86.2,0.86_rc1,0.87,0.87.1,0.88,0.88.1,0.88.3,0.88.4,and avoid the version (,0.88.6],0.15,0.20,0.21,0.22,0.23,0.24,0.51,0.52,0.53,0.54,0.60,0.60p,0.65,0.67,0.68,0.68.1,0.70,0.71,0.72,0.73,0.74,0.75,0.75.1,0.80,0.80_rc1,0.80_rc2,0.80_rc3,0.80_rc4,0.81,0.81_rc1,0.82,0.83,0.84,0.84_rc1,0.84_rc2,0.85,0.85.1,0.86,0.86.1,0.86.2,0.86_rc1,0.87,0.87.1,0.88,0.88.1,0.88.3,0.88.4