Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
- From: Tomasz Kojm <tkojm@xxxxxxxxxx>
- Date: Thu, 7 Dec 2006 20:31:42 +0100
On Thu, 7 Dec 2006 22:00:31 +0300
3APA3A <3APA3A@xxxxxxxxxxxxxxxx> wrote:
Dear Tomasz Kojm,
TK> That's _extremely_ irresponsible to disclose bugs without giving the
TK> vendors any chance to fix them and prepare new software releases.
This is a rare case I can not agree with such statement.
Ability to bypass content filter is not a bug before this issues is
used in-the-wild, like ability to write undetectable virus is not a bug
in antivirus. It may be simply impossible to find all vendors and wait
for all fixes.
I pretty much agree here, however I was particularly talking about the DoS
in ClamAV and not the MIME issue which can be fixed with a one-line patch.
--
oo ..... Tomasz Kojm <tkojm@xxxxxxxxxx>
(\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg
\..........._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\ /\ Thu Dec 7 20:26:03 CET 2006
- References:
- Multiple Vendor Unusual MIME Encoding Content Filter Bypass
- From: Hendrik Weimer
- Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
- From: Tomasz Kojm
- Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
- From: 3APA3A
- Multiple Vendor Unusual MIME Encoding Content Filter Bypass
- Prev by Date: Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
- Next by Date: [USN-393-2] GnuPG2 vulnerabilities
- Previous by thread: Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
- Next by thread: Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
- Index(es):
Relevant Pages
|
