full-disclosure - Antivirus/Trojan/Spyware scanners DoS!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <45260.207.81.153.6.1087168908.squirrel@207.81.153.6>
From: eric at arcticbears.com (Eric Paynter)
Subject: Antivirus/Trojan/Spyware scanners DoS!

On Sun, Jun 13, 2004 at 03:30:17AM -0700, bipin gautam wrote:
> I wounder how many Antivirus/Trojan/Spyware scanners
> will choak to death while having a manual scan of the
> file:
>
> http://www.geocities.com/visitbipin/SERVER_dwn.zip
>
> I was woundering, what would be the results if such
> file gets stucked in an "AV gateway" (O;
>
> please, report your findings.....

ClamAV quarantines it, although it did take a few seconds to return:

$ clamscan -V
clamscan / ClamAV version 0.72
$ clamscan SERVER_dwn.zip
SERVER_dwn.zip: Oversized.Zip FOUND

----------- SCAN SUMMARY -----------
Known viruses: 21920
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 20.13 MB
I/O buffer size: 131072 bytes
Time: 3.004 sec (0 m 3 s)

-Eric

--
arctic bears - affordable email and name services @yourdomain.com
http://www.arcticbears.com