|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues
From: Trog (trog
uncon.org)
Date: Tue Feb 01 2005 - 03:09:18 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On Mon, 2005-01-31 at 20:41 +0100, Sune Kloppenborg Jeppesen wrote:
>
> By sending a base64 encoded image file in a URL an attacker could evade
> virus scanning.
It's somewhat harsh to single out ClamAV for this issue. AFAICT, the
only two virus scanners that do currently protect against this are
ClamAV and AntiVir.
According to current testing, all the others, including:
AVG
Avast
BitDefender
DrWeb
eTrust-Iris
eTrust-Vet
F-Prot
F-Secure
Kaspersky
mks_vir
NOD32
Norman Virus Control
Panda8
Sophos
Sybari
Symantec
do not offer protection against this issue. If anyone sees any errors in
the list above, please let me know
-trog
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
iD8DBQBB/0c+9PDUb2r4PKMRAkjSAKCNHkIHRlwEN+gwF5rONah4enWiMACfS41C
94C8QXKQIFs5GJuXXdxJ63I=
=k5NU
-----END PGP SIGNATURE-----
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]