Re: Possible Mail server compromise ?

[Michael Loftis <mloftis () wgops com>]

--On February 13, 2008 12:41:28 AM +0100 "Faas M. Mathiasen" 
<faas.m.mathiasen () googlemail com> wrote:

<...>
> Is anybody aware if this is common knowledge? Who else has seen such
> an attack ? Are you monitoring your mail servers for such compromises
> regularly? The name of the Anti-Virus scanner will not be told,
> exploit might be available up on request, as soon as we analyzed it
> for content that might reveal specifics
> about us.

clamav has known vulnerabilities in past versions, FYI.  But as for "common 
knowledge" one can only answer that if one knows what AV software you're 
seeing the issue with.  Upgrade to the latest version first, see if it's 
still reproducible.  Also submit the malware to the AV vendor (or authors)

<...>