Testvirus.org - Partial (Fragmented) Vulnerability

[Stephen Swaney]

This is brought up about every month or two. Please search the archives for
testvirus.org

Steve

Stephen Swaney
President
Fortress Systems Ltd.
Steve.Swaney at FSL.com


> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Jim Scott
> Sent: Friday, July 30, 2004 12:31 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Testvirus.org - Partial (Fragmented) Vulnerability
>
> Well this got detected as Blocked Content. However the attachment instead
> of
> being the normal attachment I would expected was a .dat file named
>
> {Virus?} {Blocked Content} Virus Scanner Test #24 (non-virus).dat
>
> Here is the test description:
>
> Test #24 (non-virus): Test for the "Partial (Fragmented) Vulnerability".
> This does not include the Eicar virus, however your mail server should
> still
> block this since a virus can use this technique to break itself into
> multiple emails, bypassing virus scanners, and reassembling itself in your
> inbox. (attachment can be opened by virtually any mail program)
>
This is brought up about every month or two. Please search the archives for
testvirus.org

Steve

Stephen Swaney
President
Fortress Systems Ltd.
Steve.Swaney at FSL.com


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Fortress Systems Ltd.
www.fsl.com

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html