Related information

ClamAV antivirus DoS

[SECURITY] [DSA 1232-1] New clamav packages fix denial of service

Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass

Multiple Vendor Unusual MIME Encoding Content Filter Bypass

From:	Tomasz Kojm <tkojm_(at)_clamav.net>
Date:	08.12.2006
Subject:	Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass

On Thu, 7 Dec 2006 22:00:31 +0300
3APA3A <3APA3A@SECURITY.NNOV.RU> wrote:

> Dear Tomasz Kojm,
>
> TK> That's _extremely_ irresponsible to disclose bugs without giving the
> TK> vendors any chance to fix them and prepare new software releases.
>
>  This  is  a  rare  case I can not agree with such statement.
>
>  Ability  to  bypass  content  filter is not a bug before this issues is
>  used in-the-wild, like ability to write undetectable virus is not a bug
>  in  antivirus. It may be simply impossible to find all vendors and wait
>  for all fixes.

I pretty much agree here, however I was particularly talking about the DoS
in ClamAV and not the MIME issue which can be fixed with a one-line patch.

--
  oo    .....         Tomasz Kojm <tkojm@clamav.net>
 (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
    \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
      //\   /\              Thu Dec  7 20:26:03 CET 2006