clamav-devel February 2014 archive
Main Archive Page > Month Archives  > clamav-devel archives
clamav-devel: [Clamav-devel] Possible bypass via gz?

[Clamav-devel] Possible bypass via gz?

From: Brandon Perry <bperry.volatile_at_nospam>
Date: Mon Feb 17 2014 - 00:29:54 GMT
To: clamav-devel@lists.clamav.net

Hi,

Not sure if this person is using an old version of ClamAV and I haven't
attempted this, but he alleges he has found a way to bypass gzip'ed
tarballs by modifying a specific byte within the headers.

http://www.exploit-db.com/wp-content/themes/exploit/docs/31685.pdf

Hope this is the correct place to report this.
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net