Re: AMaViS virus scanner for Linux - root exploit

From: Ian Whalley (ianat_private)
Date: Mon Jul 19 1999 - 11:47:20 PDT

  • Next message: robert qdial: "improper chroot in dbmlparser.exe" 

    >To add insult to injury: a week or two ago I attempted to
>contact him (also with no luck) about a nasty bug, when
>using Sophos (and likely other anti virus software) AMaViS
>was not picking up on the updates, that is the updated IDE
>files in /opt/ide, and defined as SAV_IDE=/opt/ide were
>not being used by AMaViS, however from the command line,
>using the "sweep" command they were picked up  fine, this
>means AMaViS doesn't generally pick up on BO2K, etc.

The solution to this is simple -- wrap SWEEP [the Sophos
scanner] in a shell script which sets SAV_IDE before
running the SWEEP binary.

Best;

I. [former SWEEP developer]

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:52:46 PDT