On Fri, Sep 17, 2004 at 01:07:25PM +0200, Tomasz Kojm wrote:
> On Fri, 17 Sep 2004 07:59:51 +0100
> Kevin Spicer <[EMAIL PROTECTED]> wrote:
> > bytes a * will match?
>
> Yes, there is (but only supported by the development versions). The
> format is HEX1{limit}HEX2, and possible limits are:
>
> exact: {n} - exactly n characters between HEX1 and HEX2
> variable: {n-} - n or more
> {-n} - n or less
> {n1-n2} - n1, n2 or between them
So there are no absolute offsets? Like this string has to be at the
beginning. This one at the end etc.
Mayby file and some shell/perl would be a workaround for the JPEG
"problem". But I don't think thats usefull for two reasons. First
it's just an xploit and not malware. And second this produces higher
load at the server.
Greetings Daniel
--
"There are 10 types of people in this world. Those who
understand binary and those who don't."
-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
