{"id":113460,"date":"2024-02-08T16:02:41","date_gmt":"2024-02-08T14:02:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost"},"modified":"2024-02-08T16:02:41","modified_gmt":"2024-02-08T14:02:41","slug":"kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost","title":{"rendered":"Tvrtka Cisco objavila je antivirusni paket ClamAV 1.3.0 i ispravila opasnu ranjivost","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nakon \u0161est mjeseci razvoja, tvrtka Cisco objavila je izdanje slobodnog antivirusnog paketa ClamAV 1.3.0. Projekt je pre\u0161ao u ruke Cisco-a 2013. godine nakon kupnje tvrtke Sourcefire, koja je razvijala ClamAV i Snort. Izvorni kod projekta distribuira se pod GPLv2 licencom. Grana 1.3.0 pripada kategoriji obi\u010dno (ne LTS), \u010dija se a\u017euriranja objavljuju najmanje \u010detiri mjeseca nakon izlaska prvog izdanja sljede\u0107e grane. Mogu\u0107nost preuzimanja baze potpisnika za ne-LTS grane tako\u0111er se osigurava najmanje jo\u0161 \u010detiri mjeseca nakon izdanja sljede\u0107e grane.         <\/p>\n<p>Klju\u010dna pobolj\u0161anja u ClamAV 1.3:   <\/p>\n<ul>\n<li class=\"l\"> Dodana je podr\u0161ka za va\u0111enje i provjeru privitaka kori\u0161tenih u Microsoft OneNote datotekama. Parsiranje OneNote formata uklju\u010deno je prema zadanim postavkama, ali se mo\u017ee isklju\u010diti pomo\u0107u postavke &#171;ScanOneNote no&#187; u clamd.conf, opcije naredbenog retka &#171;&#8212;scan-onenote=no&#187; pri pokretanju alata clamscan ili dodavanjem CL_SCAN_PARSE_ONENOTE oznake u parameter options.parse prilikom kori\u0161tenja libclamav.\n<li class=\"l\"> Osigurana podr\u0161ka za izgradnju ClamAV-a u BeOS-sli\u010dnom operacijskom sustavu Haiku.\n<li class=\"l\"> U clamd dodana provjera postojanja direktorija za privremene datoteke, navedenog u clamd.conf putem direktive TemporaryDirectory. U slu\u010daju nepostojanja tog direktorija, proces sada zavr\u0161ava s ispunjenom gre\u0161kom.\n<li class=\"l\"> Pri postavljanju izgradnje stati\u010dkih biblioteka u CMake, osigurana je instalacija stati\u010dkih biblioteka libclamav_rust, libclammspack, libclamunrar_iface i libclamunrar, koji se koriste u libclamav.\n<li class=\"l\"> Implementirano je odre\u0111ivanje tipa datoteke za kompilirane Python skripte (.pyc). Tip datoteke se proslje\u0111uje u obliku niza parametra CL_TYPE_PYTHON_COMPILED, koji se podr\u017eava u funkcijama clcb_pre_cache, clcb_pre_scan i clcb_file_inspection.\n<li class=\"l\"> Pobolj\u0161ana je podr\u0161ka za dekriptiranje PDF dokumenata bez lozinke.        <\/ul>\n<p>Istovremeno su formirana a\u017euriranja ClamAV 1.2.2 i 1.0.5, u kojima su ispravljene dvije ranjivosti koje utje\u010du na grane 0.104, 0.105, 1.0, 1.1 i 1.2:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2024-20328 &#8212; potencijalna zamjena komandi tijekom provjere datoteka u clamd-u zbog gre\u0161ke u implementaciji direktive &#171;VirusEvent&#187;, koja se koristi za pokretanje proizvoljne komande u slu\u010daju otkrivanja virusa. Detalji o iskori\u0161tavanju ranjivosti jo\u0161 uvijek nisu otkriveni, poznato je samo da je problem rije\u0161en isklju\u010divanjem podr\u0161ke za formatiranje stringa &#8216;%f&#8217;, koji se zamjenjivao s imenom zara\u017eene datoteke.\n<p>Izgleda da se napad svodi na slanje posebno oblikovanog imena zara\u017eene datoteke, koje sadr\u017ei specijalne znakove koji se ne escapiraju tijekom pokretanja komande navedene u VirusEvent. Zanimljivo je da je sli\u010dna ranjivost ve\u0107 ispravljena 2004. godine, tako\u0111er uklanjanjem podr\u0161ke za zamjenu &#8216;%f&#8217;, koja je potom vra\u0107ena u izdanju ClamAV 0.104 i dovela do ponovnog pojavljivanja stare ranjivosti. U staroj ranjivosti, za izvr\u0161avanje svoje komande tijekom provjere virusa bilo je dovoljno kreirati datoteku s imenom &#171;; mkdir owned&#187; i zapisati u nju testnu virusnu potpis.        <\/p>\n<li class=\"l\"> CVE-2024-20290 &#8212; prelivanje baferu u kodu za parsiranje datoteka s sadr\u017eajem u OLE2 formatu, koje bi daljinski neautentificirani napada\u010d mogao iskoristiti za uskra\u0107ivanje usluge (iznenadno prekidanje procesa skeniranja). Problem je prouzro\u010den nepravilnom provjerom kraja linije tijekom skeniranja sadr\u017eaja, \u0161to dovodi do \u010ditanja izvan granica bafera.            <\/ul>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60569\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.3.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u0432 \u0440\u0443\u043a\u0438 Cisco \u0432 2013 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sourcefire, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ClamAV \u0438 Snort. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0412\u0435\u0442\u043a\u0430 1.3.0 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u0430 \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 (\u043d\u0435 LTS), \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 4 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113460","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.3.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u0432 \u0440\u0443\u043a\u0438 Cisco \u0432 2013 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sourcefire, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ClamAV \u0438 Snort.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 ClamAV 1.3.0 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.3.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u0432 \u0440\u0443\u043a\u0438 Cisco \u0432 2013 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sourcefire, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ClamAV \u0438 Snort.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-02-08T14:02:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-02-08T14:02:41+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kompanija Cisco je izdala antivirusni paket ClamAV 1.3.0 i ispravila opasnu ranjivost | ProHoster","description":"Nakon \u0161est mjeseci razvoja, kompanija Cisco je objavila izdanje slobodnog antivirusnog paketa ClamAV 1.3.0. Projekat je pre\u0161ao u ruke Cisco-a 2013. godine nakon \u0161to su kupili kompaniju Sourcefire, koja se bavila razvojem ClamAV-a i Snorta.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 ClamAV 1.3.0 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 ClamAV 1.3.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u0432 \u0440\u0443\u043a\u0438 Cisco \u0432 2013 \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sourcefire, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ClamAV \u0438 Snort.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/kompaniya-cisco-vypustila-antivirusnyj-paket-clamav-1-3-0-i-ustranila-opasnuyu-uyazvimost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-02-08T14:02:41+00:00","article:modified_time":"2024-02-08T14:02:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/113460","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=113460"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/113460\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=113460"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=113460"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=113460"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}