Re: AMaViS virus scanner for Linux - root exploit

From: Kurt Seifried (listuserat_private)
Date: Sat Jul 17 1999 - 01:45:12 PDT

  • Next message: Aleph One: "CERT Advisory CA-99.08 - cmsd"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    > The AMaViS incoming-mail virus scanning utility (available
    > at http://satan.oih.rwth-aachen.de/AMaViS/) for Linux has
    > problems.
    >
    > I tried to contact the maintainer of the package (Christian
    > Bricart) on June 26, again several times over the course of
    [snipsnip]
    > scripts.
    >
    
    To add insult to injury: a week or two ago I attempted to contact him
    (also with no luck) about a nasty bug, when using Sophos (and likely
    other anti virus software) AMaViS was not picking up on the updates,
    that is the updated IDE files in /opt/ide, and defined as
    SAV_IDE=/opt/ide were not being used by AMaViS, however from the
    command line, using the "sweep" command they were picked up fine, this
    means AMaViS doesn't generally pick up on BO2K, etc. Perhaps a new
    maintainer (an active one anyways, with a pulse) is needed.
    
    - -Kurt Seifried, MCP+I, MCSE
    https://www.seifried.org/kurt/
    Linux Administrator's Security Guide
    https://www.seifried.org/lasg/
    
    
    
    -----BEGIN PGP SIGNATURE-----
    Version: PGP Personal Privacy 6.0.2
    
    iQA/AwUBN5BClIb9cm7tpZo3EQKfIACgnahZE9f9gcbZsQ9ma84uWOI7z/4AoO21
    7+hCXPR4k6z+xFvx7jlqlTuT
    =ozEm
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:52:38 PDT