[22580] in Kerberos
Re: infected krb5-1.3.5.tar?
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Tue Sep 28 12:27:24 2004
In-Reply-To: <6C92ED5DFA3C4545A08E55F75AEF720460E3DE@gvnt5.grundvers>
Mime-Version: 1.0 (Apple Message framework v619)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <9F5FDA80-116A-11D9-9618-000A95909EE2@mit.edu>
Content-Transfer-Encoding: 7bit
From: Ken Raeburn <raeburn@mit.edu>
Date: Tue, 28 Sep 2004 12:22:42 -0400
To: "Schult, Pascal" <pascal.schult@grundvers.de>
cc: "'kerberos@mit.edu'" <kerberos@mit.edu>
Errors-To: kerberos-bounces@mit.edu
On Sep 28, 2004, at 09:27, Schult, Pascal wrote:
> Hello,
>
> got problem downloading the actual kerberus.
> http://web.mit.edu/kerberos/dist/krb5/1.3/krb5-1.3.5.tar
> a document seems to be infected.
>
> Content of tar file is a virusmessage:
I just fetched the file and it looks fine. The tar file contains two
files, krb5-1.3.5.tar.gz (the real source for the release) and
krb5-1.3.5.tar.gz.asc (a PGP signature for the former).
>
> <html><head><title>Virus report</title></head>
> <body><h1>Virus report (mail)</h1>
> Virus was found and quarantined in
> http://web.mit.edu/kerberos/dist/krb5/1.3/krb5-1.3.5.tar:<p>
> Found virus MacroStripped in file
> krb5-1.3.5/src/lib/crypto/aes/vbaxam.doc (in krb5-1.3.5.tar)<p>
> The file krb5-1.3.5.tar is moved to /var/iscan/virus/virPMeg23.<p>
Do you have some sort of interesting web proxy or anything? Or some
kind of fetch-by-mail mechanism where a virus scanner would interfere?
We do have a Word document vbaxam.doc in that directory; it came with
the AES code we picked up. It contains VBA code demonstrating the use
of the library. But it's not used as part of the build, not installed,
etc. It's just there in case someone wants it for reference.
Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
