bugtraq - Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20061207203142.2b29a7d4@Wierszokleta>
Date: Thu, 7 Dec 2006 20:31:42 +0100
From: Tomasz Kojm <tkojm@...mav.net>
To: 3APA3A <3APA3A@...URITY.NNOV.RU>
Cc: Hendrik Weimer <hendrik@...o.de>, bugtraq@...urityfocus.com,
	info@...persky.com, <info@...ecure.com>
Subject: Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass

On Thu, 7 Dec 2006 22:00:31 +0300
3APA3A <3APA3A@...URITY.NNOV.RU> wrote:

> Dear Tomasz Kojm,
> 
> TK> That's _extremely_ irresponsible to disclose bugs without giving the
> TK> vendors any chance to fix them and prepare new software releases.
> 
>  This  is  a  rare  case I can not agree with such statement.
> 
>  Ability  to  bypass  content  filter is not a bug before this issues is
>  used in-the-wild, like ability to write undetectable virus is not a bug
>  in  antivirus. It may be simply impossible to find all vendors and wait
>  for all fixes.

I pretty much agree here, however I was particularly talking about the DoS
in ClamAV and not the MIME issue which can be fixed with a one-line patch.

-- 
   oo    .....         Tomasz Kojm <tkojm@...mav.net>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Thu Dec  7 20:26:03 CET 2006