Bugtraq mailing list archives
Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
From: Tomasz Kojm <tkojm () clamav net>
Date: Thu, 7 Dec 2006 20:31:42 +0100
On Thu, 7 Dec 2006 22:00:31 +0300 3APA3A <3APA3A () SECURITY NNOV RU> wrote:
Dear Tomasz Kojm, TK> That's _extremely_ irresponsible to disclose bugs without giving the TK> vendors any chance to fix them and prepare new software releases. This is a rare case I can not agree with such statement. Ability to bypass content filter is not a bug before this issues is used in-the-wild, like ability to write undetectable virus is not a bug in antivirus. It may be simply impossible to find all vendors and wait for all fixes.
I pretty much agree here, however I was particularly talking about the DoS in ClamAV and not the MIME issue which can be fixed with a one-line patch. -- oo ..... Tomasz Kojm <tkojm () clamav net> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Thu Dec 7 20:26:03 CET 2006
Current thread:
- Multiple Vendor Unusual MIME Encoding Content Filter Bypass Hendrik Weimer (Dec 06)
- Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Tomasz Kojm (Dec 07)
- Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Luke Borg (Dec 07)
- Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass michele.sandrelli () katamail com (Dec 07)
- Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass 3APA3A (Dec 07)
- Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Tomasz Kojm (Dec 07)
- Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Gadi Evron (Dec 07)
- Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Tomasz Kojm (Dec 07)