Testvirus.org - Partial (Fragmented) Vulnerability

Jim Scott jscott at INFOCONEX.COM
Fri Jul 30 17:30:42 IST 2004


Well this got detected as Blocked Content. However the attachment instead of
being the normal attachment I would expected was a .dat file named

{Virus?} {Blocked Content} Virus Scanner Test #24 (non-virus).dat

Here is the test description:

Test #24 (non-virus): Test for the "Partial (Fragmented) Vulnerability".
This does not include the Eicar virus, however your mail server should still
block this since a virus can use this technique to break itself into
multiple emails, bypassing virus scanners, and reassembling itself in your
inbox. (attachment can be opened by virtually any mail program)

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list