|
|
BugTraq
Multiple Vendor Unusual MIME Encoding Content Filter Bypass Dec 06 2006 02:24PM Hendrik Weimer (hendrik enyo de) (2 replies) Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Dec 07 2006 02:15PM Tomasz Kojm (tkojm clamav net) (3 replies) Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Dec 07 2006 07:33PM michele.sandrelli (at) katamail (dot) com [email concealed] (michele sandrelli katamail com) Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Dec 07 2006 07:00PM 3APA3A (3APA3A SECURITY NNOV RU) (1 replies) Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Dec 07 2006 05:57PM Luke Borg (lborg hcssystems com) Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass Dec 07 2006 12:30PM Gadi Evron (ge linuxbox org) |
|
Privacy Statement |
3APA3A <3APA3A (at) SECURITY.NNOV (dot) RU [email concealed]> wrote:
> Dear Tomasz Kojm,
>
> TK> That's _extremely_ irresponsible to disclose bugs without giving the
> TK> vendors any chance to fix them and prepare new software releases.
>
> This is a rare case I can not agree with such statement.
>
> Ability to bypass content filter is not a bug before this issues is
> used in-the-wild, like ability to write undetectable virus is not a bug
> in antivirus. It may be simply impossible to find all vendors and wait
> for all fixes.
I pretty much agree here, however I was particularly talking about the DoS
in ClamAV and not the MIME issue which can be fixed with a one-line patch.
--
oo ..... Tomasz Kojm <tkojm (at) clamav (dot) net [email concealed]>
(\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg
\..........._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\ /\ Thu Dec 7 20:26:03 CET 2006
[ reply ]