full-disclosure - Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: visitbipin at yahoo.com (bipin gautam)
Subject: Multiple AV Vendor Incorrect CRC32 Bypass
	Vulnerability.


--- Frederic Charpentier <fcharpen@...opartners.com>
wrote:
> Hi, I saw this behaviour last week with the virus
> "MyDoom.BE".
> I use the mail gateway with Clamav/Amavis. Clamav
> doesn't detect the 
> virus embeded in the zip file (with a crc broken).
> But, Trendmicro detects it.

That's strange, though i admit... i've shared this
info with very few* trusted security researchers,
since past few months..... though i it find VERY HARD
to believe some, who had access to this info since
past few month were involved in creating, "MyDoom.BE" 
    (O;

bipin 


		
__________________________________ 
Do you Yahoo!? 
Read only the mail you want - Yahoo! Mail SpamGuard. 
http://promotions.yahoo.com/new_mail