← Database

CVE-2004-1876

MEDIUM CVSS: 4.6 Published: 2004-03-30 Modified: 2026-06-16

Description

The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.

Affected Platforms

Clam Anti-Virus Clamav

Weakness Type

NVD-CWE-Other

References