Re: Antivirus scanner DoS with zip archives

From: Volker Tanger (volker.tangerat_private)
Date: Thu Jul 19 2001 - 08:27:48 PDT

Next message: Marc Maiffret: "Update to "Code Red" Worm. Its a date bomb, not time."

Previous message: Aidan O'Kelly: "FW: E-Mail Content Filtering Systems."
In reply to: Paul Rogers: "RE: Antivirus scanner DoS with zip archives"
Next in thread: Stefano Zanero: "R: Antivirus scanner DoS with zip archives"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Greetings!

Paul Rogers schrieb:

> Your comment regarding MAIL/MIMESweeper is indeed correct. The 42.zip
> file (mentioned later on in the thread) consumed all available
> resources on MAILSweeper version 4.2.1 (CPU, memory and free hard
> disk space). In fact it took a while for us to remove all presence of
> the mail from the system.

TrendMicro InterScan VirusWall (3.6 on RedHat 6.2 Linux) fills the disk
up to
the last bit, then clears the disk and re-starts again, effectively
rendering the
system 100% loaded without proceeding any further. The system does
not crash, though.

(Still) waiting for reply from Trend (since monday)...

Bye
    Volker

--

Volker Tanger  <volker.tangerat_private>
 Wrangelstr. 100, 10997 Berlin, Germany
    DiSCON GmbH - Internet Solutions
         http://www.discon.de/

Next message: Marc Maiffret: "Update to "Code Red" Worm. Its a date bomb, not time."
Previous message: Aidan O'Kelly: "FW: E-Mail Content Filtering Systems."
In reply to: Paul Rogers: "RE: Antivirus scanner DoS with zip archives"
Next in thread: Stefano Zanero: "R: Antivirus scanner DoS with zip archives"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jul 19 2001 - 10:53:15 PDT