full-disclosure - Antivirus/Trojan/Spyware scanners DoS!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: evilninja at gmx.net (evilninja)
Subject: Antivirus/Trojan/Spyware scanners DoS!

bipin gautam wrote:
>>Hello everybody,
>>
>>I wounder how many Antivirus/Trojan/Spyware scanners
>>will choak to death while having a manual scan of
>>the
>>file:
>>
>>http://www.geocities.com/visitbipin/SERVER_dwn.zip
>>
>>I was woundering, what would be the results if such
>>file gets stucked in an "AV gateway" (O;
>>
>>please, report your findings..... 

evil@...ep:~$ clamscan SERVER_dwn.zip
SERVER_dwn.zip: Oversized.Zip FOUND

----------- SCAN SUMMARY -----------
Known viruses: 21904
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 20.13 MB
I/O buffer size: 131072 bytes
Time: 11.167 sec (0 m 11 s)
evil@...ep:~$

from the config of clamav:

ScanArchive
ArchiveMaxRecursion 30
ArchiveMaxFiles 1000
ArchiveMaxFileSize 100M


-> http://clamav.sourceforge.net/

-- 
BOFH excuse #29:

It works the way the Wang did, what's the problem