full-disclosure - Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20050310110027.52521.qmail@web31502.mail.mud.yahoo.com>
From: visitbipin at yahoo.com (bipin gautam)
Subject: Multiple AV Vendor Incorrect CRC32 Bypass
	Vulnerability.


--- Frederic Charpentier <fcharpen@...opartners.com>
wrote:
> Hi, I saw this behaviour last week with the virus
> "MyDoom.BE".
> I use the mail gateway with Clamav/Amavis. Clamav
> doesn't detect the 
> virus embeded in the zip file (with a crc broken).
> But, Trendmicro detects it.

That's strange, though i admit... i've shared this
info with very few* trusted security researchers,
since past few months..... though i it find VERY HARD
to believe some, who had access to this info since
past few month were involved in creating, "MyDoom.BE" 
    (O;

bipin 


		
__________________________________ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/