CVE-2007-6595: ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files use...

Security readout for executives and security teams

ClamAV 0.92 has a local file-overwrite flaw. A user already on the system may be able to trick ClamAV-related tools into overwriting files through symlink handling. Business risk is highest on shared servers or systems where ClamAV or sigtool runs with elevated privileges. Likely exposure is limited to hosts running ClamAV 0.92 or vendor builds covered by the referenced 2008 advisories. Multi-user Unix-like systems and mail or file-scanning servers are more relevant, especially if local users exist and ClamAV tools run with higher privileges. Treat this as a legacy hygiene and shared-host risk. It is not shown as actively exploited, but old antivirus infrastructure running with elevated privileges can create disproportionate operational risk. Prioritize removal or upgrade where ClamAV 0.92 remains present. Mitigation focus: Identify and replace any ClamAV 0.92 installations.; Apply the relevant distribution vendor advisory updates.; Check current ClamAV vendor guidance for supported upgrade paths..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.