CVE:CVE-2009-1270
CNNVD:CNNVD-200904-180
ClamAV（Clam AntiVirus）是Clamav团队的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。
ClamAV 0.95之前版本存在代码注入漏洞，该漏洞源于libclamav/untar.c允许远程攻击者借助一个特制的TAR文件，拒绝服务攻击(死循环)。该TAR文件会造成(1)clamd和(2)clamscan挂起。
solution:Upgrade clamav clamav to a higher version than 0.95,and avoid the version (,0.95); Upgrade debian debian_linux to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade canonical ubuntu_linux to a higher version than 8.10,and avoid the version 8.10