On Thu, 18 Nov 2004 21:01:57 +0100
Bogus�aw Brandys <[EMAIL PROTECTED]> wrote:

> Well not exactly. Just try this :
> - corrupt daily.cvd by putting some garbagge inside

freshclam will never download & install a broken database

> Now of course clamscan and other based on libclamav refuse to scan but
> 
> freshclam will not recognize that this file is corrupted and so
> wouldn't be able to download the same but not broken database version.

[...]

> This is a small security problem  (not in Linux becouse of proper 
> permissions)  in Windows becouse someone *must* delete broken database
> (some malware could corrupt database for example)

In this "special" case one will have to wait for a next update.

-- 
   oo    .....         Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Thu Nov 18 21:00:47 CET 2004

Attachment: pgpnGgGa5Wabj.pgp
Description: PGP signature

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to