[11065] in bugtraq

home help back first fref pref prev next nref lref last post

Re: AMaViS virus scanner for Linux - root exploit

daemon@ATHENA.MIT.EDU (Kurt Seifried)
Sun Jul 18 01:13:27 1999

Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id:  <004701bed030$af3f9560$1400010a@seifried.org>
Date:         Sat, 17 Jul 1999 02:45:12 -0600
Reply-To: Kurt Seifried <listuser@seifried.org>
From: Kurt Seifried <listuser@SEIFRIED.ORG>
X-To:         Chris McDonough <mcdonc@IQGROUP.COM>, BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> The AMaViS incoming-mail virus scanning utility (available
> at http://satan.oih.rwth-aachen.de/AMaViS/) for Linux has
> problems.
>
> I tried to contact the maintainer of the package (Christian
> Bricart) on June 26, again several times over the course of
[snipsnip]
> scripts.
>

To add insult to injury: a week or two ago I attempted to contact him
(also with no luck) about a nasty bug, when using Sophos (and likely
other anti virus software) AMaViS was not picking up on the updates,
that is the updated IDE files in /opt/ide, and defined as
SAV_IDE=/opt/ide were not being used by AMaViS, however from the
command line, using the "sweep" command they were picked up fine, this
means AMaViS doesn't generally pick up on BO2K, etc. Perhaps a new
maintainer (an active one anyways, with a pulse) is needed.

- -Kurt Seifried, MCP+I, MCSE
https://www.seifried.org/kurt/
Linux Administrator's Security Guide
https://www.seifried.org/lasg/



-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.0.2

iQA/AwUBN5BClIb9cm7tpZo3EQKfIACgnahZE9f9gcbZsQ9ma84uWOI7z/4AoO21
7+hCXPR4k6z+xFvx7jlqlTuT
=ozEm
-----END PGP SIGNATURE-----

home help back first fref pref prev next nref lref last post