Re: Clamav hacking

[Jim Halfpenny <jim.halfpenny () gmail com>]

You could potentially DoS a machine by submitting multiple samples for
analysis if that is permitted. Scanning can chew up a lot of CPU.

Any bugs in the decoders/dissectors in clamav could be an entry point for a
malicious sample but I am not aware of any such bugs. Think of the
complexity of having multiple decoders for binary formats, packers and such.

Regards,
Jim

On Tuesday, 6 September 2011, Nathan Gibbs <nathan () cmpublishers com> wrote:
> On 9/5/2011 7:21 PM, Joel Esler wrote:
> > I would love anything interesting regarding hacking a network instance of
ClamAV!
> > --
> > Joel Esler
> > Sourcefire
> > OpenSource Community Manager:  Snort, ClamAV, Daemonlogger, and Razorback
> >
> >
> >
> > ;)
> LOL
> Joel, you already know what my ideas are.
>
>
> We will get there, but lets let some people smarter than me, you
> included, weigh in.
>
>
> --
> Sincerely,
>
> Nathan Gibbs
>
> Systems Administrator
> Christ Media
> http://www.cmpublishers.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com