CVE:CVE-2006-2427
CNNVD:CNNVD-200605-317
(1) Clam Antivirus (ClamAV) 0.88和(2) ClamXav 1.0.3h及之前版本的freshclam在处理config-file 命令行选项之前未放弃特权，这会使本地用户在目标文件的第一行显示出错信息时读取部分任意文件。
solution:Upgrade clam_anti-virus clamav to a higher version than 0.88,and avoid the version 0.88; Upgrade clam_anti-virus clamxav to a higher version than 1.0.3h,and avoid the version 1.0.3h