Testvirus.org - Partial (Fragmented) Vulnerability
Jim Scott
jscott at INFOCONEX.COM
Fri Jul 30 17:30:42 IST 2004
Well this got detected as Blocked Content. However the attachment instead of
being the normal attachment I would expected was a .dat file named
{Virus?} {Blocked Content} Virus Scanner Test #24 (non-virus).dat
Here is the test description:
Test #24 (non-virus): Test for the "Partial (Fragmented) Vulnerability".
This does not include the Eicar virus, however your mail server should still
block this since a virus can use this technique to break itself into
multiple emails, bypassing virus scanners, and reassembling itself in your
inbox. (attachment can be opened by virtually any mail program)
-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
More information about the MailScanner
mailing list