<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body>
clamav has options such as:<br>
--max-files --max-space --max-recursion and --max-ratio<br>
..which will protect against these types of DOS attacks.<br>
<br>
-Matt Cuttler<br>
<br>
<br>
<br>
Richard Massa wrote:
<blockquote cite="mid20040712093337.G20725@tictactoe.unixboxen.net"
type="cite">
<pre wrap="">exploit does not crash SAV corporate edition 8.1.1.319, Scan engine 4.2.0.7.
Scan of file completes successfully.
On Fri, Jul 09, 2004 at 08:55:45PM -0700, bipin gautam wrote:
</pre>
<blockquote type="cite">
<pre wrap="">--- "Peter B. Harvey (Information Security)"
<a class="moz-txt-link-rfc2396E" href="mailto:peterharvey@emergency.qld.gov.au"><peterharvey@emergency.qld.gov.au></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Could you please password protect it and email it to
me. Ill test on Trend Micro.
Peter
</pre>
</blockquote>
<pre wrap="">dust download the file and hit scan, watch out You AV
can trigger a DoS autometically.
It has been confirmed Norton 2004 uses 100% cpu for a
indefinate amount of time. (Tested in 3 Ghz processor)
Please read updates in this advisory at:
<a class="moz-txt-link-freetext" href="http://www.geocities.com/visitbipin/Nav_dos_part_3.html">http://www.geocities.com/visitbipin/Nav_dos_part_3.html</a>
and test the exploit with some other AV scanners!
------------
bipin
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
<a class="moz-txt-link-freetext" href="http://promotions.yahoo.com/new_mail">http://promotions.yahoo.com/new_mail</a>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: <a class="moz-txt-link-freetext" href="http://lists.netsys.com/full-disclosure-charter.html">http://lists.netsys.com/full-disclosure-charter.html</a>
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
</blockquote>
<br>
</body>
</html>