RE: [Clamav-users] Clamav and the CR Vulnerability

2004-11-09 Thread Jason Frisvold
> -Original Message- > From: Tomasz Kojm [mailto:[EMAIL PROTECTED] > Subject: Re: [Clamav-users] Clamav and the CR Vulnerability > > > In 0.80 --mbox is enabled by default, and --no-mail disables it. > There's no --mail switch, though. I thought it was --mbo

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Tomasz Kojm
On Mon, 08 Nov 2004 21:41:56 -0600 Graham Toal <[EMAIL PROTECTED]> wrote: > > > Looks like something is stripping the virus out before it ever hit > > > clamav.. However, I did get a copy with the virus in it, and > > > clamscan doesn't detect it... I'm not sure why though ... > > > > > > [EMAI

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Graham Toal
> > Looks like something is stripping the virus out before it ever hit > > clamav.. However, I did get a copy with the virus in it, and clamscan > > doesn't detect it... I'm not sure why though ... > > > > [EMAIL PROTECTED] cur]# clamscan --mail > > 1099939661.22577.jake.emcyber.com\,S\=1306\:2

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Simon Burr
On Mon, Nov 08, 2004 at 01:52:42PM -0500, Jason Frisvold wrote: >Looks like something is stripping the virus out before it ever hit clamav.. >However, I did get a copy with the virus in it, and clamscan doesn't detect >it... I'm not sure why though ... Okay, this is getting strange. I've taken t

RE: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread clamav
On Mon, 8 Nov 2004, Jason Frisvold wrote: > > Looks like something is stripping the virus out before it ever hit > clamav.. However, I did get a copy with the virus in it, and clamscan > doesn't detect it... I'm not sure why though ... > > [EMAIL PROTECTED] cur]# clamscan --mail > 1099939661

RE: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Jason Frisvold
> -Original Message- > From: Simon Burr [mailto:[EMAIL PROTECTED] > Subject: Re: [Clamav-users] Clamav and the CR Vulnerability > > Interesting; I've just tested the email www.testvirus.org > sends out for > test #17 and I've found that ClamAV detects

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Simon Burr
On Mon, Nov 08, 2004 at 08:30:18AM -0500, Jason Frisvold wrote: [Test #17 (Eicar virus hidden using the "CR Vulnerability") from ] [www.testvirus.org ] >I'm not running qmail-scanner, I'm running simscan. Either way, the email >that comes in doesn't ap

RE: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Jason Frisvold
> -Original Message- > From: Nigel Horne [mailto:[EMAIL PROTECTED] > Subject: Re: [Clamav-users] Clamav and the CR Vulnerability > > It was blocked by my set up. Maybe qmail-scanner is the > problem, try using clamav's internal scanner. I'm not runnin

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-07 Thread Nigel Horne
>From Jason Frisvold > I decided to run all of the tests located at testvirus.org against my mail > server. As expected, tests 24 and 25 > got through, no surprise there. > However, test 17 also made it through. This test is described as follows : >Test #17: Eicar virus hidden using the "CR V

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-05 Thread Thomas Lamy
Jim Maul schrieb: Ken Jones wrote: Hi all, I decided to run all of the tests located at testvirus.org against my mail server. As expected, tests 24 and 25 got through, no surprise there. However, test 17 also made it through. This test is described as follows : I sent it to my server as w

RE: [Clamav-users] Clamav and the CR Vulnerability

2004-11-05 Thread Jason Frisvold
> -Original Message- > From: Ken Jones [mailto:[EMAIL PROTECTED] > Subject: Re: [Clamav-users] Clamav and the CR Vulnerability > > > I sent it to my server as well, and it was caught. Clamav 80. Did you just do this? I tried looking at the source of the email I rec

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-05 Thread Jim Maul
Ken Jones wrote: Hi all, I decided to run all of the tests located at testvirus.org against my mail server. As expected, tests 24 and 25 got through, no surprise there. However, test 17 also made it through. This test is described as follows : I sent it to my server as well, and it was

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-05 Thread Ken Jones
> Hi all, > > I decided to run all of the tests located at testvirus.org against my > mail server. As expected, tests 24 and 25 got through, no surprise > there. However, test 17 also made it through. This test is described as > follows : I sent it to my server as well, and it was caught

[Clamav-users] Clamav and the CR Vulnerability

2004-11-05 Thread Jason Frisvold
Hi all, I decided to run all of the tests located at testvirus.org against my mail server. As expected, tests 24 and 25 got through, no surprise there. However, test 17 also made it through. This test is described as follows : Test #17: Eicar virus hidden using the "CR Vulnerability"