full-disclosure - Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <55F91F85042EFC51C1B0367C@[10.3.62.6]>
From: pbieringer at aerasec.de (Dr. Peter Bieringer)
Subject: Multiple AV Vendor Incorrect CRC32
	Bypass	Vulnerability.

Hi,

--On Mittwoch, 9. M?rz 2005 18:36 -0800 bipin gautam <visitbipin@...oo.com> 
wrote:

> Multiple AV Vendor Incorrect CRC32 Bypass
> Vulnerability.
>
> Description:
> if you create a zip archive with invalid CRC
> checksum...... some AV skip scanning the archive
> marking it as clean........ by this way, you can
> bypass antivirus gateways and slip in any attachment
> without scanning the archive.

I don't believe you need invalid CRC sums...we're currently investigate an 
interesting issue, more coming next here on this list ;-)

Regards,
	Dr. Peter Bieringer
-- 
Dr. Peter Bieringer                             Phone: +49-8102-895190
AERAsec Network Services and Security GmbH        Fax: +49-8102-895199
Wagenberger Strasse 1                          Mobile: +49-174-9015046
D-85662 Hohenbrunn                       E-Mail: pbieringer@...asec.de
Germany                                Internet: http://www.aerasec.de