Hi,
is it possible to have a clamav signature for the exploit ?
Proof of conecpt here: http://www.computerterrorism.com/research/ie/poc.htm
Regards.
--
Cedric Foll
Ingénieur Sécurité & Réseaux
Division Informatique, Rectorat de Rouen
"More people are killed every year by pigs than by sharks,
I'm trying to get ClamAV working on my CentOS 3.6 system. I have these
rpms installed:
clamav-db-0.87-1.1.el3.rf
clamav-milter-0.87-1.1.el3.rf
clamd-0.87-1.1.el3.rf
clamav-0.87-1.1.el3.rf
I successfully got clamd to fire right up after I created and edited the
initial /etc/clam.conf file it n
On Wed, 2005-11-23 at 14:34, Mike Staver wrote:
> I'm trying to get ClamAV working on my CentOS 3.6 system. I have these
> rpms installed:
>
> clamav-db-0.87-1.1.el3.rf
> clamav-milter-0.87-1.1.el3.rf
> clamd-0.87-1.1.el3.rf
> clamav-0.87-1.1.el3.rf
>
> I successfully got clamd to fire right up
I successfully got clamd to fire right up after I created and edited the
initial /etc/clam.conf file it needed. I read on the project site that
you can set up clamav-milter to be a sort of hook into Sendmail, which I
also run. I added these lines to my sendmail.mc file:
INPUT_MAIL_FILTER(‘clm
Mike Staver said:
> INPUT_MAIL_FILTER(âclmilterâ,âS=local:/var/clamav/clmilter.socket,F=,
> T=S:4m;R:4mâ)dnl
> define(âconfINPUT_MAIL_FILTERSâ, âclmilterâ)
>
> Granted, I modified it to point to the right file - but the syntax is
> the same. My only question at this point - this f
INPUT_MAIL_FILTER(‘clmilter’,‘S=local:/var/clamav/clmilter.socket,F=,
T=S:4m;R:4m’)dnl
define(‘confINPUT_MAIL_FILTERS’, ‘clmilter’)
Granted, I modified it to point to the right file - but the syntax is
the same. My only question at this point - this file (clmilter.socket),
it sti
Mike Staver said:
>>>INPUT_MAIL_FILTER(âclmilterâ,âS=local:/var/clamav/clmilter.socket,F=,
>>>T=S:4m;R:4mâ)dnl
>>>define(âconfINPUT_MAIL_FILTERSâ, âclmilterâ)
>>>
>>>Granted, I modified it to point to the right file - but the syntax is
>>>the same. My only question at this point -
On Wed, 2005-11-23 at 17:35, Mike Staver wrote:
> >>I successfully got clamd to fire right up after I created and edited the
> >>initial /etc/clam.conf file it needed. I read on the project site that
> >>you can set up clamav-milter to be a sort of hook into Sendmail, which I
> >>also run. I ad
"Philip Craig" schrieb:
> Does anyone know when an rpm of clamav-0.87.1 will be available for SuSE
> distros? It seems the ones on ftp.suse.com are dated mid September and are
> still 0.87
They are since 2005-11-11:
| SUSE Security Summary Report
|
| Announcement
