bugtraq id 3133

From: Christian Julien (christian.julienat_private)
Date: Wed Aug 22 2001 - 02:42:14 PDT

Next message: SNS Research: "AVTronics InetServer DoS and BoF Vulnerabilities"

Previous message: mbwhiteat_private: "RE: Bug in MAS90 Accounting Platform remote access?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I have ask Trend Micro to put an option regarding InterScan VirusWall
decoding errors:

it could be:

in case of decoding error:

- bypass scanning (default)
or
- move document in some place and let administrator decide what to do
with it.


There were an option "Block messages when scan engine encounters
decoding error" at 3.02 level, but default was to move document.
I imagine that ISP felt constrained by default behaviour. From that,
this option disappears.
I have ask for it to come back in vain since May 2000.
pajaat_private post proves this option is realy missing.

> Trend Micro InterScan VirusWall is unable to filter or clean the
>  TROJ_SIRCAM.A virus from attachments in electronic mail format
>  (.eml).
> 
>  This vulnerability is due to a problem with InterScan's ability to decode
>  certain attachment types.

Regards,
Christian Julien
 | site:       christian.julienat_private
 | enterprise: christian.julienat_private

Next message: SNS Research: "AVTronics InetServer DoS and BoF Vulnerabilities"
Previous message: mbwhiteat_private: "RE: Bug in MAS90 Accounting Platform remote access?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Aug 22 2001 - 08:30:02 PDT