MIME problems again with version 3.79 - Need some help.

Hi all,

I'm having problems with the '-mime' option in the
Savi lib. Apparently versions 3.77 -> 3.79 ( and 3.79
NSV ) doesn't handle MIME well. Version 3.76 works
fine.

Anyone interested in testing I'm providing a zip file
with 6 virii. Password is 'virus'. The only one that
works is W32SoBig-F ( just to prove that it works in
some cases... )

http://200.246.179.120/virus6.zip

In order to test:

sweep -f -mime W32Sobig-A

But if you use an external mime decoder and the files,
guess what, it works !

With sophie, it happens the same. Sophie running
against 3.76 works well, but with newer version it
doesn't. So anyone running Sophie with newer libs and
no external mime handling should take care, because
legitimate virii are not being caught.

I also would like to ask anybody that confirms this
bug to open a ticket at Sophos. I've been trying them
to fix this bug/vulnerability since version 3.77 and
they are ignoring my requests. 

Thanks
Renato.

__________________________________
Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster
http://search.yahoo.com