Re: Possible bypass via gz?

Matt Olney <[email protected]>
Newsgroups gmane.comp.security.virus.clamav.devel
Message-ID <CAN+QiX8c0=ZLRx7132uymypzTRz9yi4Mp-xrLRDeVUiWn4=+mw@mail.gmail.com>
Thanks, Bradon.  We'll review this.


On Sun, Feb 16, 2014 at 7:29 PM, Brandon Perry <[email protected]>wrote:

> Hi,
>
> Not sure if this person is using an old version of ClamAV and I haven't
> attempted this, but he alleges he has found a way to bypass gzip'ed
> tarballs by modifying a specific byte within the headers.
>
>
> http://www.exploit-db.com/wp-content/themes/exploit/docs/31685.pdf
>
> Hope this is the correct place to report this.
> _______________________________________________
> http://lurker.clamav.net/list/clamav-devel.html
> Please submit your patches to our Bugzilla: http://bugs.clamav.net
>
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.