Bugtraq mailing list archives

Re: AMaViS virus scanner for Linux - root exploit


From: listuser () SEIFRIED ORG (Kurt Seifried)
Date: Sat, 17 Jul 1999 02:45:12 -0600


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The AMaViS incoming-mail virus scanning utility (available
at http://satan.oih.rwth-aachen.de/AMaViS/) for Linux has
problems.

I tried to contact the maintainer of the package (Christian
Bricart) on June 26, again several times over the course of
[snipsnip]
scripts.


To add insult to injury: a week or two ago I attempted to contact him
(also with no luck) about a nasty bug, when using Sophos (and likely
other anti virus software) AMaViS was not picking up on the updates,
that is the updated IDE files in /opt/ide, and defined as
SAV_IDE=/opt/ide were not being used by AMaViS, however from the
command line, using the "sweep" command they were picked up fine, this
means AMaViS doesn't generally pick up on BO2K, etc. Perhaps a new
maintainer (an active one anyways, with a pulse) is needed.

- -Kurt Seifried, MCP+I, MCSE
https://www.seifried.org/kurt/
Linux Administrator's Security Guide
https://www.seifried.org/lasg/

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.0.2

iQA/AwUBN5BClIb9cm7tpZo3EQKfIACgnahZE9f9gcbZsQ9ma84uWOI7z/4AoO21
7+hCXPR4k6z+xFvx7jlqlTuT
=ozEm
-----END PGP SIGNATURE-----


Current thread: