full-disclosure - [ GLSA 200501-46 ] ClamAV: Multiple issues

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [month] [year] [list]

From: trog at uncon.org (Trog)
Subject: [ GLSA 200501-46 ] ClamAV: Multiple issues

On Mon, 2005-01-31 at 20:41 +0100, Sune Kloppenborg Jeppesen wrote:

> 
> By sending a base64 encoded image file in a URL an attacker could evade
> virus scanning.

It's somewhat harsh to single out ClamAV for this issue. AFAICT, the
only two virus scanners that do currently protect against this are
ClamAV and AntiVir.

According to current testing, all the others, including:

AVG
Avast
BitDefender
DrWeb
eTrust-Iris
eTrust-Vet
F-Prot
F-Secure
Kaspersky
mks_vir
NOD32
Norman Virus Control
Panda8
Sophos
Sybari
Symantec

do not offer protection against this issue. If anyone sees any errors in
the list above, please let me know

-trog

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050201/b98377d8/attachment.bin