Luke Borg
14/12/06, 10:43
How so? I can't see why it's anyones responsibility's to fix a
corporations code, Especially if they don't have you on their payroll.
Tomasz Kojm wrote:
> On Wed, 06 Dec 2006 15:24:25 +0100
> Hendrik Weimer <hendrik@enyo.de> wrote:
>
>
>> Several e-mail virus scanners can be tricked into passing an EICAR
>> test file if the following conditions are met:
>>
>> 1. the EICAR file is encoded in Base64 including characters not in the
>> standard alphabet (e.g. whitespaces) and
>> 2. the part containing the EICAR file is nested within one or several
>> levels of multipart/mixed content.
>>
>> Details and PoC can be found at:
>> http://www.quantenblog.net/security/virus-scanner-bypass
>>
>
> That's _extremely_ irresponsible to disclose bugs without giving the vendors
> any chance to fix them and prepare new software releases.
>
>
corporations code, Especially if they don't have you on their payroll.
Tomasz Kojm wrote:
> On Wed, 06 Dec 2006 15:24:25 +0100
> Hendrik Weimer <hendrik@enyo.de> wrote:
>
>
>> Several e-mail virus scanners can be tricked into passing an EICAR
>> test file if the following conditions are met:
>>
>> 1. the EICAR file is encoded in Base64 including characters not in the
>> standard alphabet (e.g. whitespaces) and
>> 2. the part containing the EICAR file is nested within one or several
>> levels of multipart/mixed content.
>>
>> Details and PoC can be found at:
>> http://www.quantenblog.net/security/virus-scanner-bypass
>>
>
> That's _extremely_ irresponsible to disclose bugs without giving the vendors
> any chance to fix them and prepare new software releases.
>
>