On Wed, 3 Nov 2004 01:35:39 +0100 Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Tue, 2 Nov 2004 16:11:30 -0800 (PST)
> [EMAIL PROTECTED] wrote:
>
> > Matches a case-sensitive regex of: IFRAME={256,}
> >
> > Exploit.IFRAME.foo:*:494652414d453d??{256-}
>
> Bad format.
>
> > You can probably all see the problem already. IfRaMe is not cought
> > by our sig. Does this mean 6! (factorial) additional signatures are
Just for the record: the above calculation is also incorrect. There are
2^6 (= 64) possibilities (and not 6! = 720) to write "iframe" with mixed
upper and lower case letters.
--
oo ..... Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg
\..........._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\ /\ Wed Nov 3 01:42:09 CET 2004
pgp4j7sAWN8XR.pgp
Description: PGP signature
_______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
