bugtraq - Re: Virus scan attack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040622073405.GA14712@DAPCVA.da>
Date: Tue, 22 Jun 2004 09:34:05 +0200
From: Vincent Archer <var@...y-all.com>
To: "Joao B. Diehl" <diehl@....inpe.br>
Cc: Nate Nord <natenord@...imus.com>, visitbipin@...mail.com,
	bugtraq@...urityfocus.com
Subject: Re: Virus scan attack


On Sat, Jun 19, 2004 at 11:26:29AM -0300, Joao B. Diehl wrote:
> We had this same problem with the DAT 4367. Returning to
> DAT 4366 it worked again.
> 
> Nate Nord wrote:
> >Just wondering if anyone else has seen this come through their mail portal.
> >Something has caused our McAfee Webshield SMTP to seriously eat processor
> >time... to the point that it will no longer forward scanned mail.  I've had
> >to temporarily bypass it until I figure out what it's choking on.  I saw
> >several other posts that said this sent processors into some kind of loop
> >and this is exactly what appears to be happening with our portal.

Witnessed on a linux and solaris installs. In both cases, reverting to the
previous dat archive restored function.

-- 
Vincent ARCHER
Spécialiste système & sécurité
varcher@...y-all.com <mailto:varcher@...y-all.com>
Tel : +33 (0)1 40 07 47 14
Fax : +33 (0)1 40 07 47 27
Deny All - 5, rue Scribe - 75009 Paris - France
www.deny-all.com