From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Mar 11 12:10:03 2004 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 68CD016A4D0 for ; Thu, 11 Mar 2004 12:10:03 -0800 (PST) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3B2B743D3F for ; Thu, 11 Mar 2004 12:10:03 -0800 (PST) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) i2BKA3bv036165 for ; Thu, 11 Mar 2004 12:10:03 -0800 (PST) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.10/8.12.10/Submit) id i2BKA3Uv036164; Thu, 11 Mar 2004 12:10:03 -0800 (PST) (envelope-from gnats) Resent-Date: Thu, 11 Mar 2004 12:10:03 -0800 (PST) Resent-Message-Id: <200403112010.i2BKA3Uv036164@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Veselin Slavov Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 98DD616A4CE for ; Thu, 11 Mar 2004 12:08:02 -0800 (PST) Received: from server.slavof.net (vess.bnc.bg [213.130.68.146]) by mx1.FreeBSD.org (Postfix) with ESMTP id 89F5A43D2D for ; Thu, 11 Mar 2004 12:07:59 -0800 (PST) (envelope-from vess@server.slavof.net) Received: (from root@localhost) by server.slavof.net (8.12.9p2/8.12.9) id i2BK7tGN056572 for freebsd-gnats-submit@freebsd.org; Thu, 11 Mar 2004 22:07:55 +0200 (EET) (envelope-from vess@server.slavof.net) Received: from server.slavof.net (localhost [127.0.0.1]) by server.slavof.net (8.12.9p2/8.12.9av) with ESMTP id i2BK7lRE056549 for ; Thu, 11 Mar 2004 22:07:47 +0200 (EET) (envelope-from vess@server.slavof.net) Received: (from root@localhost) by server.slavof.net (8.12.9p2/8.12.9/Submit) id i2BK7k8J056548; Thu, 11 Mar 2004 22:07:46 +0200 (EET) (envelope-from vess) Message-Id: <200403112007.i2BK7k8J056548@server.slavof.net> Date: Thu, 11 Mar 2004 22:07:46 +0200 (EET) From: Veselin Slavov To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Subject: ports/64115: Found the *!zip virus !!! X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Veselin Slavov List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Mar 2004 20:10:03 -0000 >Number: 64115 >Category: ports >Synopsis: Found the *!zip virus !!! >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Mar 11 12:10:02 PST 2004 >Closed-Date: >Last-Modified: >Originator: Veselin Slavov >Release: FreeBSD 4.9-STABLE i386 >Organization: >Environment: System: FreeBSD server.slavof.net 4.9-STABLE FreeBSD 4.9-STABLE #4: Sun Nov 9 00:36:25 EET 2003 vess@server.slavof.net:/usr/obj/usr/src/sys/slavof i386 Scan engine v4.3.20 for BSD. Virus data file v4336 created Mar 10 2004 Scanning for 87499 viruses, trojans and variants. >Description: In current version - "zip virus" detection INPOSIBLE. "Mail message with atached "zip" file (made with password and included infected 'exe') " >How-To-Repeat: >Fix: --- work/amavis-perl-11/amavis/amavis.orig Thu Mar 11 21:46:30 2004 +++ work/amavis-perl-11/amavis/amavis Thu Mar 11 21:43:35 2004 @@ -128,7 +128,7 @@ # Notification my $warnadmin = "yes"; my $warnrecip = "no"; -my $warnsender = "yes"; +my $warnsender = "no"; # Add X-Virus-Scanned line to mail? my $X_HEADER = "yes"; @@ -241,6 +241,7 @@ } mkdir("$TEMPDIR/parts", 0700) || do_exit($REGERR, __LINE__); +mkdir("$TEMPDIR/parts/unable_unzip", 0700) || do_exit($REGERR, __LINE__); do_log(0,"starting. amavis perl-11 Thu Mar 11 11:39:27 EET 2004"); @@ -1027,7 +1028,9 @@ $zip->extractMember($_,$newpart); } } - unlink("$TEMPDIR/parts/$part") unless (defined $selfextract{$part}); + my $old_name="$TEMPDIR/parts/$part"; + my $new_name="$TEMPDIR/parts/unable_unzip/$part"; + rename $old_name, $new_name unless (defined $selfextract{$part}); return 1; } >Release-Note: >Audit-Trail: >Unformatted: