{"id":113460,"date":"2024-02-08T16:02:41","date_gmt":"2024-02-08T14:02:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost"},"modified":"2024-02-08T16:02:41","modified_gmt":"2024-02-08T14:02:41","slug":"kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost","title":{"rendered":"Cisco t\u00f5i turule viiruset\u00f5rjepaketi ClamAV 1.3.0 ja k\u00f5rvaldas t\u00f5sise haavatavuse.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u00e4rast kuue kuu arengut avaldas Cisco vabavara viiruset\u00f5rjepaketi ClamAV 1.3.0. Projekt l\u00e4ks Cisco k\u00e4tte 2013. aastal p\u00e4rast Sourcefire'i ostu, mis arendas ClamAV ja Snort. Projekti kood jagatakse GPLv2 litsentsi alusel. 1.3.0 versioon klassifitseeritakse tavalisteks (mitte LTS) versioonideks, millele antakse uuendusi minimaalset 4 kuud p\u00e4rast j\u00e4rgmise versiooni alguskuup\u00e4eva. Samuti on signatuuribaasi allalaadimise v\u00f5imalus mitte-LTS versioonide jaoks tagatud v\u00e4hemalt 4 kuud p\u00e4rast j\u00e4rgmise versiooni v\u00e4ljaandmist.         <\/p>\n<p>ClamAV 1.3 peamised uuendused:   <\/p>\n<ul>\n<li class=\"l\"> Lisatud on toetus Microsoft OneNote'i failides kasutatavatele manustele. OneNote'i formaadi anal\u00fc\u00fcs on vaikimisi lubatud, kuid soovi korral saab selle v\u00e4lja l\u00fclitada seadistuse \"ScanOneNote no\" abil clamd.conf failis, k\u00e4skude rida \"--scan-onenote=no\" ClamScan utiliidi k\u00e4ivitamisel v\u00f5i lisades flagi CL_SCAN_PARSE_ONENOTE parameetrisse options.parse, kui kasutatakse libclamav.\n<li class=\"l\"> ClamAV-i koostamine BeOS-i sarnases operatsioonis\u00fcsteemis Haiku on sujuvam.\n<li class=\"l\"> Clamd'sse on lisatud kontroll katalooge jaoks ajutiste failide salvestamiseks, mis on m\u00e4\u00e4ratud clamd.conf failis l\u00e4bi direktiivi TemporaryDirectory. Kui see kataloog puudub, l\u00f5petatakse protsess n\u00fc\u00fcd vea teadete edastamisega.\n<li class=\"l\"> CMake'is staatiliste teegikogumite seadistamisel on tagatud staatiliste teegikogumite libclamav_rust, libclammspack, libclamunrar_iface ja libclamunrar paigaldamine, mida kasutab libclamav.\n<li class=\"l\"> Teostatud on faili t\u00fc\u00fcbi m\u00e4\u00e4ramine kompileeritud Python-skripti (.pyc) jaoks. Faili t\u00fc\u00fcp edastatakse stringiparameetrina CL_TYPE_PYTHON_COMPILED, mida toetatakse funktsioonides clcb_pre_cache, clcb_pre_scan ja clcb_file_inspection.\n<li class=\"l\"> PDF-dokumentide, millel on t\u00fchi parool, de\u0161ifreerimise toetust on parendatud.        <\/ul>\n<p>Samuti on v\u00e4lja antud uuendused ClamAV 1.2.2 ja 1.0.5, milles on k\u00f5rvaldatud kaks haavatavust, mis m\u00f5jutavad versioone 0.104, 0.105, 1.0, 1.1 ja 1.2:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2024-20328 \u2014 v\u00f5imalus sisestada k\u00e4ske failide kontrollimise protsessi clamd-s, mis tuleneb vea olemasolust direktiivis \"VirusEvent\", mida kasutatakse juhuslike k\u00e4skude k\u00e4ivitamiseks viiruse leidmisel. Haavandi ekspluateerimise \u00fcksikasju ei ole veel avalikustatud, on teada, et probleem on lahendatud, keelates VirusEvent'i loendava parameetri '%f' toe, mis asendati nakatunud failinimega.\n<p>Ilmselt r\u00fcnnak seisneb spetsiaalselt vormindatud nakatunud failinime edastamises, mis sisaldab k\u00e4su t\u00e4itmise ajal mitte-ekraanitavaid erim\u00e4rke VirusEvent'is m\u00e4\u00e4ratud k\u00e4sus. Tuleb m\u00e4rkida, et sarnane haavatavus likvideeriti juba 2004. aastal samuti '%f' asendamise toe eemaldamisega, misj\u00e4rel see taastati ClamAV 0.104 v\u00e4ljaandes ja viis vana haavatavuse taass\u00fcnnini. Vana haavatavuse raames oli viiruset\u00f5rjenime korral vaja lihtsalt luua fail nimega '; mkdir owned' ja kirjutada sellesse prooviviiruse allkiri.        <\/p>\n<li class=\"l\"> CVE-2024-20290 \u2014 puhver\u00fclevus OLE2 formaadis failide anal\u00fc\u00fcsi koodis, mida kaugelt autentimata r\u00fcndaja v\u00f5ib kasutada teenuse katkestamiseks (skaneerimisprotsessi kokkuvarisemine). Probleem tuleneb vale rea l\u00f5pu kontrollimisest skaneerimise ajal, mis viib lugemiseni puhvri piiridest v\u00e4ljapoole.            <\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60569\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.3.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u0432 \u0440\u0443\u043a\u0438 Cisco \u0432 2013 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sourcefire, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ClamAV \u0438 Snort. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0412\u0435\u0442\u043a\u0430 1.3.0 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u0430 \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 (\u043d\u0435 LTS), \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 4 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113460","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.3.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u0432 \u0440\u0443\u043a\u0438 Cisco \u0432 2013 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sourcefire, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ClamAV \u0438 Snort.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 ClamAV 1.3.0 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.3.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u0432 \u0440\u0443\u043a\u0438 Cisco \u0432 2013 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sourcefire, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ClamAV \u0438 Snort.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-02-08T14:02:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-02-08T14:02:41+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ettev\u00f5te Cisco avaldas viiruset\u00f5rje paketi ClamAV 1.3.0 ja k\u00f5rvaldati ohtlik haavatavus | ProHoster","description":"P\u00e4rast kuuekuulist arendust\u00f6\u00f6d avaldas ettev\u00f5te Cisco tasuta viiruset\u00f5rje paketi ClamAV 1.3.0. Projekt l\u00e4ks Cisco k\u00e4tte 2013. aastal p\u00e4rast Sourcefire'i ettev\u00f5tte omandamist, milles t\u00f6\u00f6tati ClamAV ja Snorti arendamisel.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 ClamAV 1.3.0 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.3.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u0432 \u0440\u0443\u043a\u0438 Cisco \u0432 2013 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sourcefire, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ClamAV \u0438 Snort.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-02-08T14:02:41+00:00","article:modified_time":"2024-02-08T14:02:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113460","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=113460"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113460\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=113460"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=113460"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=113460"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}