CVE-2007-4560

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."

CVSS v2.0 NVD

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

83.54% chance of exploitation in the next 30 days, 100th percentile

Published

2007-08-28

Updated

2024-08-07

Proof-of-concept exploits (3)

• 0x1sac/ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution0★ · 2023-01-27
• Sic4rio/-Sendmail-with-clamav-milter-0.91.2---Remote-Command-Execution0★ · 2023-12-20
• Strikoder-Premium/sendmail-clamav-exploit-CVE-2007-45604★ · 2025-12-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/clamav_milter_blackhol…

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/16924
• https://www.exploit-db.com/exploits/9913
• https://www.exploit-db.com/exploits/4761

Security advisories

• http://secunia.com/advisories/26654
• http://secunia.com/advisories/26674
• http://secunia.com/advisories/26683
• http://secunia.com/advisories/26751
• http://secunia.com/advisories/26822
• http://secunia.com/advisories/26916
• http://www.nruns.com/security_advisory_clamav_remote_code_exection.php
• http://www.securityfocus.com/bid/25439
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:172

References

• CVE Record
• NVD entry

Related

• CVE-2009-3103
• CVE-2015-3224
• CVE-2021-43798
• CVE-2022-42889
• CVE-2024-21626
• CVE-2026-29000