Bugtraq mailing list archives

Re: AMaViS virus scanner for Linux - root exploit

From: ian () WHALLEY ORG (Ian Whalley)
Date: Mon, 19 Jul 1999 18:47:20 -0000

To add insult to injury: a week or two ago I attempted to
contact him (also with no luck) about a nasty bug, when
using Sophos (and likely other anti virus software) AMaViS
was not picking up on the updates, that is the updated IDE
files in /opt/ide, and defined as SAV_IDE=/opt/ide were
not being used by AMaViS, however from the command line,
using the "sweep" command they were picked up  fine, this
means AMaViS doesn't generally pick up on BO2K, etc.


The solution to this is simple -- wrap SWEEP [the Sophos
scanner] in a shell script which sets SAV_IDE before
running the SWEEP binary.

Best;

I. [former SWEEP developer]

Current thread:

Re: ircd exploit in ircu based code (fwd) Andrea Cocito (Jul 14)
- linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Domingos Bruges (Jun 30)
  - Re: linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Marcelo Roccasalva (Jul 21)
- Re: ircd exploit in ircu based code (fwd) Matt Hallacy (Jul 15)
  - Re: ircd exploit in ircu based code (fwd) Andrea Cocito (Jul 16)
- Logic Error in Management Edition NetWare install script for Dr. Sololomon's Bayard G. Bell (Jul 16)
- AMaViS virus scanner for Linux - root exploit Chris McDonough (Jul 16)
  - CERT Advisory CA-99.08 - cmsd Aleph One (Jul 16)
  - Re: AMaViS virus scanner for Linux - root exploit Kurt Seifried (Jul 17)
    - Re: AMaViS virus scanner for Linux - root exploit Ian Whalley (Jul 19)
  - Swish-e Jean-Georges Estiot (Jul 17)
  - Re: AMaViS virus scanner for Linux - root exploit Chris McDonough (Jul 18)
    - Re: AMaViS virus scanner for Linux - root exploit Jim Hebert (Jul 19)
    - tiger vulnerability Ellen L Mitchell (Jul 20)
  - iplogger Ymas problem Salvatore Sanfilippo -antirez- (Jul 18)
  - Re: AMaViS virus scanner for Linux - root exploit Christian Bricart (Jul 19)