RE: Long path exploit on NTFS

From: Didier Arenzana (darenzanaat_private)
Date: Tue Feb 05 2002 - 00:59:14 PST

  • Next message: David Sexton: "RE: Long path exploit on NTFS" 

    Hello,
I've tried the script with virus scan 4.5.0.534, signature file 4.0.4183.

o If VirusShield is active while runing the script, it detects both files
and prevent their generation, but crashes on the second one. However, even
after the crash it's still active. The ceation of viruses is still not
possible, but you are not warned anymore.

o If VirusShield is not active while runing the script, and you scan the
disk afterwards, the first file is detected and removed, the second one is
not, and there is no error message of any kind.

Regards,
Didier.

 --- "Fleming, Diane" <dflemingat_private> a écrit : 
> Any information as to whether or not McAfee Virus Scan 4.x has this
> vulnerability?
> 
> -----Original Message-----
> From: Frank Heyne [mailto:fhat_private-dresden.de]
> Sent: Monday, February 04, 2002 1:15 PM
> To: bugtraqat_private; hans.somersat_private
> Subject: Re: Long path exploit on NTFS
> 
> 
> On 4 Feb 2002, at 10:26, Hans Somers wrote:
> 
> > Not Vunerable:
> > --------------
> > *1  					
> >  Sophos Anti-Virus v3.53
> 
> This is not true.
> 
> According to my own tests, Sophos Anti-Virus v3.53
> is unable to find virii in deeply nested NTFS subdirectories on NT 4.
> 
> 
> 
> Frank Heyne
> 
> 
>  

___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.fr

    This archive was generated by hypermail 2b30 : Wed Feb 06 2002 - 15:36:38 PST