| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <4342894.1062595350@[10.3.62.6]> From: pbieringer at aerasec.de (Dr. Peter Bieringer) Subject: Trend Micro Interscan Viruswall: missing whole_file_scan=yes let pass at least one Sobig.f eMail Hi again, --On Mittwoch, 3. September 2003 12:56 +0200 "Dr. Peter Bieringer" <pbieringer@...asec.de> wrote: > seen on Interscan Viruswall for Linux 3.8 Build 1080, one email > containing a Sobig.f passed the scanner without any detection. > > A Trend Micro "vscan" run on the received plain mail will detect the > virus. > > Response from support: add in section "[smtp]" option > "whole_file_scan=yes" > > Interesting, looks like the default is "no" (very dangerous imho), also > it looks like this option is neither documented nor changeable via web > interface. Inbetween I got additional URLs from another guy: http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionID=13531 http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionID=15152 Problem is a "known issue"...read for yourself...has anyone ever received a warning about that problem from the vendor? It's not nice to get information after an incident... Peter -- Dr. Peter Bieringer Phone: +49-8102-895190 AERAsec Network Services and Security GmbH Fax: +49-8102-895199 Wagenberger Stra?e 1 Mobile: +49-174-9015046 D-85662 Hohenbrunn E-Mail: pbieringer@...asec.de Germany Internet: http://www.aerasec.de
Powered by blists - more mailing lists