On Thu, 12 Apr 2007 18:08:06 -0400
James Kosin <[EMAIL PROTECTED]> wrote:

> I just tested and clamd will try to read any file with the extension
> of .cvd in the /var/lib/clamav directory.
> My simple question is:
>   "Could this pose a security or virus scanning problem if someone
> managed to place an empty or invalid .cvd file intensionally in the
> database directory?"

And what if the same person replaces clamd with a backdoor? Did you hear
about filesystem permissions?

-- 
   oo    .....         Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Fri Apr 13 00:13:05 CEST 2007
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to