Full Disclosure mailing list archives

Re: Antivirus/Trojan/Spyware scanners DoS!


From: bipin gautam <visitbipin () yahoo com>
Date: Mon, 14 Jun 2004 23:23:08 -0700 (PDT)


--- Chad_Loder () rapid7 com wrote:
There is a history of years and years of antivirus
products
choking on funky compressed files.

We had reports of quite a few AV products crapping
out on
the invalid zip files included with our zip advisory
from 2002:

       
http://www.rapid7.com/advisories/R7-0004/R7-0004.tgz

       
http://www.rapid7.com/advisories/R7-0004/index.html

I doubt they've all been fixed.  Feel free to try
out your favorite
product on those files (there is a valid gzipped
tarball with
semivalid zip files containing the antivirus test
file).

Ok, i got your point but... i am here talking about,
the problems [DoS] that AV scanners face while
scanning BIG [size] compressed files, not... ling file
names. But I am sure, NAV 2002 should had problems
scanning
http://www.rapid7.com/advisories/R7-0004/R7-0004.tgz
back in 2002

regards,

bipin



        
                
__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/ 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: