bugtraq - Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050201224120.GA25776@nul.ereomega.net>
Date: Tue, 01 Feb 2005 14:41:20 -0800
From: Dack <dackbug@...omega.net>
To: bugtraq@...urityfocus.com
Subject: Re: [Full-Disclosure] [ GLSA 200501-46 ] ClamAV: Multiple issues


> > By sending a base64 encoded image file in a URL an attacker could evade
> > virus scanning.
> It's somewhat harsh to single out ClamAV for this issue. AFAICT, the
> only two virus scanners that do currently protect against this are

What mail clients, if any, would execute a virus encoded in this manner?
Is this a gaping hole in other mail anti-virus systems, or do most
clients just ignore this kind of data?