Package: clamav-daemon Version: 0.95.3+dfsg-1~volatile1 Severity: important Tags: patch
Hi,
after upgrading to version 0.95.3+dfsg-1~volatile1 of the clamav
packages we encountered numerous crashes in clamd. The crashes appeared
about two days after upgrading but only on systems that had the new
version installed. I believe the combination of the new version and a
new / newly detected virus triggered a previously present but hardly
used code-path. The problem is very likely caused by an uninitialized
char-pointer.
This is a stack backtrace received from a core file and the debugging
package:
-- 8< --
#0 0xb7de061b in strlen () from /lib/libc.so.6
No symbol table info available.
#1 0xb7db03ec in vfprintf () from /lib/libc.so.6
No symbol table info available.
#2 0xb7dd2a64 in vsnprintf () from /lib/libc.so.6
No symbol table info available.
#3 0xb7f48373 in cli_dbgmsg_internal (str=0xb7f504b3 "FP SIGNATURE:
%s:%u:%s\n") at others_common.c:115
buff = "LibClamAV debug: FP SIGNATURE:
3b0fd4cdd5e315e38f30783d89c7866e:32093:\224u\222\f##\222##\177\024#z$2#(C\214J###Y#H\017^\230_H\214df###\037,\211*\206D\231##\224#\032##\004#ZF\2062#Q\206H29#\025#\2248?#\232#c\212\025##0\231#\002#\202###\005\232\222o\213\037}\031\035P\236:#\f#~M###\202##\003\236\207R\000#\035#\217\2079\027X#"...
#4 0xb7ed49e8 in cli_checkfp (fd=11, ctx=0xb15fef44) at matcher.c:247
digest = (unsigned char *) 0xb0401528
";\017####\025#\2170x=\211#\206n\030"
md5 = "3b0fd4cdd5e315e38f30783d89c7866e"
virname = <value optimized out>
pos = 0
sb = {st_dev = 2054, __pad1 = 0, st_ino = 1615785, st_mode = 33216,
st_nlink = 1, st_uid = 0, st_gid = 0, st_rdev = 0, __pad2 = 0, st_size = 32093,
st_blksize = 4096, st_blocks = 64, st_atim = {
tv_sec = 1264616726, tv_nsec = 0}, st_mtim = {tv_sec = 1264616726, tv_nsec
= 0}, st_ctim = {tv_sec = 1264616726, tv_nsec = 0}, __unused4 = 0, __unused5 =
0}
patt = (const struct cli_bm_patt *) 0x0
#5 0xb7f16967 in lhdr (zip=0xb7c5f000 <Address 0xb7c5f000 out of bounds>,
zsize=32043, fu=0xb15fd768, fc=1, ch=0xb7c66d05 <Address 0xb7c66d05 out of
bounds>, ret=0xb15fd764, ctx=0xb15fef44,
tmpd=0xb0400a08 "/var/tmp/clamav-6e001ffbed4991639bd867cb211ae7f3", fd=11)
at unzip.c:367
name = "dhl_label_nr4719.exe\00...@#@\031A#T!##\t}##`-\216", '\0'
<repeats 152 times>,
"QVx##gG#\030#\033#\017##s##\t\217\v\2219rG-##\002#\237(/#B\217#\024#\221\023\210o##\006#n\000\037##I\221c\233#g#!\032##"
csize = <value optimized out>
usize = <value optimized out>
meta = (struct cli_meta_node *) 0xb6d4e064
#6 0xb7f17280 in cli_unzip (f=11, ctx=0xb15fef44) at unzip.c:473
fc = 1
fu = 0
ret = 0
fsize = 32093
lhoff = <value optimized out>
coff = <value optimized out>
st = {st_dev = 2054, __pad1 = 0, st_ino = 1615785, st_mode = 33216,
st_nlink = 1, st_uid = 0, st_gid = 0, st_rdev = 0, __pad2 = 0, st_size = 32093,
st_blksize = 4096, st_blocks = 64, st_atim = {
tv_sec = 1264616726, tv_nsec = 0}, st_mtim = {tv_sec = 1264616726, tv_nsec
= 0}, st_ctim = {tv_sec = 1264616726, tv_nsec = 0}, __unused4 = 0, __unused5 =
0}
map = (uint8_t *) 0xb7c5f000 <Address 0xb7c5f000 out of bounds>
tmpd = 0xb0400a08 "/var/tmp/clamav-6e001ffbed4991639bd867cb211ae7f3"
#7 0xb7edfbc5 in cli_magic_scandesc (desc=11, ctx=0xb15fef44) at
scanners.c:1946
ret = 0
type = CL_TYPE_ZIP
dettype = 0
sb = {st_dev = 2054, __pad1 = 0, st_ino = 1615785, st_mode = 33216,
st_nlink = 1, st_uid = 0, st_gid = 0, st_rdev = 0, __pad2 = 0, st_size = 32093,
st_blksize = 4096, st_blocks = 64, st_atim = {
tv_sec = 1264616726, tv_nsec = 0}, st_mtim = {tv_sec = 1264616726, tv_nsec
= 0}, st_ctim = {tv_sec = 1264616726, tv_nsec = 0}, __unused4 = 0, __unused5 =
0}
typercg = <value optimized out>
#8 0xb7ee6559 in fileblobScan (fb=0xb0400a40) at blob.c:651
rc = <value optimized out>
ftype = 2
#9 0xb7ee6a13 in fileblobScanAndDestroy (fb=0xb0400a40) at blob.c:416
No locals.
#10 0xb7eee114 in do_multipart (mainMessage=0x0, messages=<value optimized
out>, i=0, rc=0xb15fdbb8, mctx=0xb15febf8, messageIn=0xb04004c8,
tptr=0xb15fdbb4, recursion_level=0) at mbox.c:5218
fb = <value optimized out>
addToText = false
dtype = <value optimized out>
aMessage = (message *) 0xb0400630
doPhishingScan = 1
#11 0xb7eec8a8 in parseEmailBody (messageIn=0xb04004c8, textIn=0x0,
mctx=0xb15febf8, recursion_level=0) at mbox.c:2458
lines = 565
m = (message **) 0xb0400a70
old_rc = OK
subtype = 5
htmltextPart = <value optimized out>
mimeSubtype = 0xb0400608 "mixed"
boundary = 0xb0400970 "----------5FB15G4A919B1FH6"
aMessage = <value optimized out>
mimeType = <value optimized out>
inhead = 0
i = <value optimized out>
t_line = (const text *) 0xb040f7f0
multiparts = 0
messages = (message **) 0xb0400a70
rc = OK
aText = (text *) 0x0
mainMessage = (message *) 0x0
fb = <value optimized out>
infected = false
engine = <value optimized out>
doPhishingScan = 1
addToText = false
dtype = <value optimized out>
aMessage = (message *) 0xb0400630
doPhishingScan = 1
#12 0xb7eed27b in cli_parse_mbox (dir=0xb0400468
"/var/tmp/clamav-97bcb7d9c861910ade5829ff33df6bb7", desc=<value optimized out>,
ctx=0xb15fef44) at mbox.c:1426
retcode = 1
i = <value optimized out>
body = (message *) 0xb04004c8
fd = (FILE *) 0xb04004c8
mctx = {dir = 0xb0400468
"/var/tmp/clamav-97bcb7d9c861910ade5829ff33df6bb7", rfc821Table = 0x9f341f0,
subtypeTable = 0x9f29b58, ctx = 0xb15fef44, files = 0}
rfc821 = (table_t *) 0x9f341f0
subtype = (table_t *) 0x9f29b58
#13 0xb7ee11ce in cli_scanmail (desc=10, ctx=0xb15fef44) at scanners.c:1566
dir = 0xb0400468 "/var/tmp/clamav-97bcb7d9c861910ade5829ff33df6bb7"
ret = 20
#14 0xb7edf6d8 in cli_magic_scandesc (desc=10, ctx=0xb15fef44) at
scanners.c:2005
ret = 0
type = CL_TYPE_MAIL
dettype = 0
sb = {st_dev = 2054, __pad1 = 0, st_ino = 1747851, st_mode = 33184,
st_nlink = 1, st_uid = 101, st_gid = 101, st_rdev = 0, __pad2 = 0, st_size =
44818, st_blksize = 4096, st_blocks = 88, st_atim = {
tv_sec = 1264616726, tv_nsec = 0}, st_mtim = {tv_sec = 1264616726, tv_nsec
= 0}, st_ctim = {tv_sec = 1264616726, tv_nsec = 0}, __unused4 = 0, __unused5 =
0}
typercg = <value optimized out>
#15 0xb7ee086d in cl_scandesc (desc=10, virname=0xb15fefd8, scanned=0xb15ff2a4,
engine=0x9f18c08, scanoptions=25143) at scanners.c:2160
ctx = {virname = 0xb15fefd8, scanned = 0xb15ff2a4, root = 0x0, engine =
0x9f18c08, scansize = 77287, options = 25143, recursion = 2, scannedfiles = 3,
found_possibly_unwanted = 0, dconf = 0xb7cb2134}
rc = <value optimized out>
#16 0xb7ee08ed in cl_scanfile (filename=0xb0401488
"/var/spool/exim4/scan/1NaCZy-0006TJ-3e/1NaCZy-0006TJ-3e.eml",
virname=0xb15fefd8, scanned=0xb15ff2a4, engine=0x9f18c08, scanoptions=25143) at
scanners.c:2209
fd = <value optimized out>
ret = 8
-- >8 --
The problem is that in "cli_checkfp", the variable that should hold the
virus name contains an invalid value:
-- 8< --
(gdb) print *ctx->virname
$1 = 0x2 <Address 0x2 out of bounds>
-- >8 --
When trying to "print" the message this pointer is dereferenced which
causes the segmentation fault.
Because the pointer to the context structure, ctx, is passed around
within the library *a lot*, it is very hard to determine for sure where
this invalid content comes from. I believe that it originates from a
missing initialization in clamd/scanner.c:scan_callback, though. In that
function you can find the following code:
-- 8< --
const char *virname;
…
ret = cl_scanfile(filename, &virname, &scandata->scanned, scandata->engine,
scandata->options);
-- >8 --
In the (possibly rare) case that "virname" is never written to before it
reaches "cli_checkfp", the printing function there will try to access
random memory. In our case, the virus "Suspect.Bredozip-zippwd-2"
appears to have caused this condition reproducibly but due to the
productive nature of the system my possibilities to verify this are
limited.
I changed the declaration of the "virname" variable to include an
initialization, i.e.
-- 8< --
const char *virname = NULL;
…
ret = cl_scanfile(filename, &virname, &scandata->scanned, scandata->engine,
scandata->options);
-- >8 --
built and installed new (custom) packages and haven't observed a crash
since then; even though the above virus has been detected in the
meantime.
I believe the problem can be used for a denial of service attack. Please
consider promoting the bug to a security problem.
Regards,
—octo
-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav
Config file: clamd.conf
-----------------------
LogFile = "/var/log/clamav/clamav.log"
LogFileUnlock disabled
LogFileMaxSize disabled
LogTime = "yes"
LogClean = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose = "yes"
PidFile = "/var/run/clamav/clamd.pid"
TemporaryDirectory = "/var/tmp"
DatabaseDirectory = "/var/lib/clamav/"
LocalSocket = "/var/run/clamav/clamd.ctl"
FixStaleSocket = "yes"
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = "15"
StreamMaxLength = "10485760"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "12"
ReadTimeout = "180"
CommandReadTimeout = "5"
SendBufTimeout = "500"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath disabled
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
SelfCheck = "3600"
VirusEvent disabled
ExitOnOOM disabled
Foreground disabled
Debug = "yes"
LeaveTemporaryFiles disabled
User = "clamav"
AllowSupplementaryGroups = "yes"
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = "yes"
ScanPE = "yes"
ScanELF = "yes"
DetectBrokenExecutables disabled
ScanMail = "yes"
MailFollowURLs disabled
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
ScanPDF = "yes"
ScanArchive = "yes"
ArchiveBlockEncrypted disabled
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "5"
MaxFiles = "1000"
ClamukoScanOnAccess disabled
ClamukoScanOnOpen disabled
ClamukoScanOnClose disabled
ClamukoScanOnExec disabled
ClamukoIncludePath disabled
ClamukoExcludePath disabled
ClamukoMaxFileSize = "5242880"
DevACOnly disabled
DevACDepth disabled
Config file: freshclam.conf
---------------------------
LogFileMaxSize disabled
LogTime disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
PidFile = "/var/run/clamav/freshclam.pid"
DatabaseDirectory = "/var/lib/clamav/"
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = "/var/log/clamav/freshclam.log"
DatabaseOwner = "clamav"
Checks = "24"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.local.clamav.net", "database.clamav.net",
"db.de.clamav.net"
MaxAttempts = "5"
ScriptedUpdates = "yes"
CompressLocalDatabase disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/etc/clamav/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "30"
ReceiveTimeout = "30"
SubmitDetectionStats disabled
DetectionStatsCountry disabled
SafeBrowsing disabled
clamav-milter.conf not found
Software settings
-----------------
Version: 0.95.3
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2
Database directory: /var/lib/clamav/
main.cld: version 51, sigs: 545035, built on Thu May 14 16:28:45 2009
daily.cld: version 10354, sigs: 161600, built on Wed Feb 3 12:03:21 2010
--- data dir ---
total 56332
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 01:58
clamav-0115c042ad397d8e66358d168f951337
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 00:01
clamav-01d7bf025fd7a8974dab43a849d3fea5
drwxr-xr-x 2 clamav clamav 4096 2008-03-07 15:41
clamav-02ce1d0627fcb2012800b2a53c0f13f5
drwxr-xr-x 2 clamav clamav 4096 2008-04-04 15:45
clamav-0556428cd69394ff40e78870ed29c382
drwxr-xr-x 2 clamav clamav 4096 2008-03-20 18:34
clamav-09b46280d7363de5b7f2d3b649fa0fb7
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 16:58
clamav-09dc9150bb60d7f6df50d331a301657b
drwxr-xr-x 2 clamav clamav 4096 2008-03-19 03:57
clamav-0a72487b378eda937e1d4a9bf0dc06bd
drwxr-xr-x 2 clamav clamav 4096 2008-03-06 13:13
clamav-0c25118080bc971e95d712aba875eb31
drwxr-xr-x 2 clamav clamav 4096 2008-04-06 23:55
clamav-0daf9d927bf29339880f5e7267a265c2
drwxr-xr-x 2 clamav clamav 4096 2008-04-05 05:05
clamav-0e765d71e09aa15a3457a5423f017df2
drwxr-xr-x 2 clamav clamav 4096 2008-02-17 02:46
clamav-0ed3d85c4490e4307d32f10888412d8e
drwxr-xr-x 2 clamav clamav 4096 2008-03-27 16:03
clamav-122b4326e90b6f112395783bd06ab0e5
drwxr-xr-x 2 clamav clamav 4096 2008-03-10 11:39
clamav-16e8fe402659031dce8086ff87cd7720
drwxr-xr-x 2 clamav clamav 4096 2008-03-12 15:29
clamav-17e03bd85ceaad397eb0a6f64fd571a8
drwxr-xr-x 2 clamav clamav 4096 2008-04-05 04:03
clamav-18b15cfd45735fb7719deee8dc7c3182
drwxr-xr-x 2 clamav clamav 4096 2008-02-15 11:33
clamav-1a1743de164d55e92136321c3c905968
drwxr-xr-x 2 clamav clamav 4096 2008-02-04 18:22
clamav-1a5cd108c5aadd83779fa4f71bbaa67e
drwxr-xr-x 2 clamav clamav 4096 2008-02-28 14:50
clamav-1ae78dd5e96f2a54a5e0e2e122e0869f
drwxr-xr-x 2 clamav clamav 4096 2008-04-10 04:52
clamav-1d01b9691281837fdc61ae2bb9593fcb
drwxr-xr-x 2 clamav clamav 4096 2008-04-22 00:40
clamav-1d34a36d12ba70c4e0187418c7de09d0
drwxr-xr-x 2 clamav clamav 4096 2008-02-18 06:34
clamav-1dae1b81e8dc7fbc530c84dd88c025df
drwxr-xr-x 2 clamav clamav 4096 2008-02-18 00:32
clamav-1e64ceced0f5b208a5cc92dc478cfebb
drwxr-xr-x 2 clamav clamav 4096 2008-03-07 15:38
clamav-23f13c8363ea3073c18eff46133f42c6
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 12:54
clamav-26cbdb4078931dedff482c7248b145b8
drwxr-xr-x 2 clamav clamav 4096 2008-03-21 23:00
clamav-272b6f25fa26d276376f789a64c59ea3
drwxr-xr-x 2 clamav clamav 4096 2008-03-05 07:46
clamav-2a7bef799388c414c279c13164c0da97
drwxr-xr-x 2 clamav clamav 4096 2008-03-01 19:32
clamav-2b5c69c33034d20717e77a340a0006ab
drwxr-xr-x 2 clamav clamav 4096 2008-02-16 05:40
clamav-2bed2c834dcfe73ea35f2b6ec433db02
drwxr-xr-x 2 clamav clamav 4096 2008-03-30 04:23
clamav-2dd8cb739121beb985fc60f5e10dbc81
drwxr-xr-x 2 clamav clamav 4096 2008-02-04 06:19
clamav-2fbfa9d67af78549c5b6d0fe3bada68e
drwxr-xr-x 2 clamav clamav 4096 2008-04-03 03:10
clamav-339a35fdc0d97def8e50e7983703f6c0
drwxr-xr-x 2 clamav clamav 4096 2008-03-09 21:28
clamav-35f9226097bc7b63dbc579a2064528d3
drwxr-xr-x 2 clamav clamav 4096 2008-03-03 19:08
clamav-3655992ad23aaea307f4d1b3a882880e
drwxr-xr-x 2 clamav clamav 4096 2008-04-30 21:50
clamav-36cb45becc85d6d5b5896074d6f32d80
drwxr-xr-x 2 clamav clamav 4096 2008-02-04 11:20
clamav-372868bc64d5dcda83c25e8a45f9e224
drwxr-xr-x 2 clamav clamav 4096 2008-03-31 17:07
clamav-381a2a00e85db873ed21bcbfdbb42735
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 00:15
clamav-38fb1f4905c28e791c158ace74e55008
drwxr-xr-x 2 clamav clamav 4096 2008-04-16 02:45
clamav-39aa3af7a2222d9d29ac2e3cccbbc98d
drwxr-xr-x 2 clamav clamav 4096 2008-03-03 04:57
clamav-3b93a6c1b7b16c0ece65aa335c453d2d
drwxr-xr-x 2 clamav clamav 4096 2008-03-13 01:36
clamav-3ba90b1228ee83e33393b6c44517467d
drwxr-xr-x 2 clamav clamav 4096 2008-02-17 08:26
clamav-3d8eef6955d2c6b8bac011b65c6b2152
drwxr-xr-x 2 clamav clamav 4096 2008-02-12 10:28
clamav-3ec5c39a807054645a75c1498dae09e2
drwxr-xr-x 2 clamav clamav 4096 2008-02-06 15:39
clamav-4338497925555bb42d7d0c05dc12ab6a
drwxr-xr-x 2 clamav clamav 4096 2008-02-04 11:20
clamav-4726b02b8b998231e2f12f8b4a6ad742
drwxr-xr-x 2 clamav clamav 4096 2008-02-03 04:11
clamav-482ee484d9ebdf1330abe372bc5bd2e9
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 08:33
clamav-48e441893fa6269c3e891a97fb033ecd
drwxr-xr-x 2 clamav clamav 4096 2008-04-08 00:07
clamav-4c3dad5d717981f8a0c33412b502e760
drwxr-xr-x 2 clamav clamav 4096 2008-03-19 06:01
clamav-4d03e5d17b0d9bc206eda17cdf276509
drwxr-xr-x 2 clamav clamav 4096 2008-02-01 23:58
clamav-4ecc8d10bf1dc5b0a12d6e3fa6b0a394
drwxr-xr-x 2 clamav clamav 4096 2008-03-25 00:14
clamav-50e66c9b017076b2b98def289dee54cb
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 00:24
clamav-5234f04278c251c84027e7348a1527d4
drwxr-xr-x 2 clamav clamav 4096 2008-02-13 02:36
clamav-5335ba5e4eced7c7783e0ad3893134e2
drwxr-xr-x 2 clamav clamav 4096 2008-02-03 12:13
clamav-584e4fc3b9d669672c2fc77404ccc32d
drwxr-xr-x 2 clamav clamav 4096 2008-02-01 15:55
clamav-5a429faecf362f89d91e80900115c891
drwxr-xr-x 2 clamav clamav 4096 2008-02-23 17:38
clamav-5ff38b5d92f8bd41b12b4bed96c51b1d
drwxr-xr-x 2 clamav clamav 4096 2008-02-08 18:59
clamav-664c0c7096b67a41827681684af9a3e2
drwxr-xr-x 2 clamav clamav 4096 2008-03-31 18:10
clamav-66a543e84d328279e0d927782b9b8ef8
drwxr-xr-x 2 clamav clamav 4096 2008-01-02 18:44
clamav-672c0f5c22615e2cd8e40feb0eb55ef1
drwxr-xr-x 2 clamav clamav 4096 2008-02-13 06:37
clamav-68a7bbd1000e5bf3ef0d6dd9d536d2c6
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 01:39
clamav-698b5e07199f649e22ad685b57a251aa
drwxr-xr-x 2 clamav clamav 4096 2008-03-07 05:28
clamav-699ad625fe6990e1317476aab979786a
drwxr-xr-x 2 clamav clamav 4096 2008-05-01 22:00
clamav-6bec368e28d022096d39cfbaa91ec8ac
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 18:00
clamav-70b4db8cb42bae0b810d8513535f2a02
drwxr-xr-x 2 clamav clamav 4096 2008-04-06 23:48
clamav-715ddf9224e8d69eebf4329dad0cc4e2
drwxr-xr-x 2 clamav clamav 4096 2008-02-12 22:35
clamav-71826da0507beaa3ee241d776b39736d
drwxr-xr-x 2 clamav clamav 4096 2008-04-05 07:09
clamav-71c524a8043b1e75a2d6cfddc53c2901
drwxr-xr-x 2 clamav clamav 4096 2008-04-01 00:21
clamav-73249ff03234299ac4e11fbd3091ab60
drwxr-xr-x 2 clamav clamav 4096 2008-01-31 16:47
clamav-73540d3b91c576c3ea444d5729e56e9b
drwxr-xr-x 2 clamav clamav 4096 2008-04-23 05:01
clamav-77981dd6b49a6cd8fa992d15523e8aeb
drwxr-xr-x 2 clamav clamav 4096 2008-02-04 23:23
clamav-78d901273947a706f549537e88631d44
drwxr-xr-x 2 clamav clamav 4096 2008-02-10 21:16
clamav-7e1d9d891f15e97816acfb18eecac7f6
drwxr-xr-x 2 clamav clamav 4096 2008-03-18 23:50
clamav-7e7f2bb775295484d0147ce4ecba442a
drwxr-xr-x 2 clamav clamav 4096 2008-04-04 00:30
clamav-7e94fc43f7dea4078d5d0209ca120540
drwxr-xr-x 2 clamav clamav 4096 2008-02-12 13:30
clamav-8045efc63face5af701d3717715eff8a
drwxr-xr-x 2 clamav clamav 4096 2008-03-04 11:28
clamav-80c123d0318ff5709b2a46ad11576513
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 16:57
clamav-818dd008612e776c405730ba06c94271
drwxr-xr-x 2 clamav clamav 4096 2008-03-04 03:20
clamav-83befffa6a6e7b1b9e5b31f126e65e0b
drwxr-xr-x 2 clamav clamav 4096 2008-04-23 16:10
clamav-83ff8635c690e499e31af35a9086ea15
drwxr-xr-x 2 clamav clamav 4096 2008-02-15 21:37
clamav-84b9ec748b2d658e72f3a9b38c2a19ca
drwxr-xr-x 2 clamav clamav 4096 2008-03-27 08:59
clamav-8645fee30584c064db9f9112c2732dbb
drwxr-xr-x 2 clamav clamav 4096 2008-02-07 23:53
clamav-87a515ba0716ad485e3f0472c4fa31dd
drwxr-xr-x 2 clamav clamav 4096 2008-03-20 02:21
clamav-8850a54a925874fc4eefbcaa661f8c89
drwxr-xr-x 2 clamav clamav 4096 2008-03-29 21:11
clamav-8ef745ed2954eed2fbeabd5977f30c99
drwxr-xr-x 2 clamav clamav 4096 2008-04-03 00:08
clamav-8f90006e8e826f3aca9d9ac864798ac1
drwxr-xr-x 2 clamav clamav 4096 2008-02-06 00:32
clamav-8fe16ea25377dd6a0ac6a74f6e5108d4
drwxr-xr-x 2 clamav clamav 4096 2008-04-04 01:30
clamav-91517978a51402a06d70dc0e3d428f28
drwxr-xr-x 2 clamav clamav 4096 2008-03-01 17:27
clamav-917273ece82e937d888f21050c128df4
drwxr-xr-x 2 clamav clamav 4096 2008-03-25 01:17
clamav-91a63e053d86c3196ec4575e073f0dcd
drwxr-xr-x 2 clamav clamav 4096 2008-04-05 00:54
clamav-924cff2e0f9d05bce24c161d96548ee7
drwxr-xr-x 2 clamav clamav 4096 2008-03-11 09:56
clamav-932edb9b296d4a003d4041b8958c762c
drwxr-xr-x 2 clamav clamav 4096 2008-02-19 17:51
clamav-932eee84360b04166abf655c430d87c8
drwxr-xr-x 2 clamav clamav 4096 2008-04-01 00:22
clamav-94acb39282bf85e66ea22a0dfcf94e95
drwxr-xr-x 2 clamav clamav 4096 2008-04-05 04:03
clamav-953a703a04e0f75bcf18e0ae7a802420
drwxr-xr-x 2 clamav clamav 4096 2008-02-19 01:45
clamav-97791361bd79412d600d58bc5f1f4dc0
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 00:10
clamav-980df681c9141102d6731aa835733b37
drwxr-xr-x 2 clamav clamav 4096 2008-03-18 03:25
clamav-99796793a63d416f672f07e5fccd7068
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 01:41
clamav-9a3a44f9190856808ec7d856ec9658ab
drwxr-xr-x 2 clamav clamav 4096 2008-02-04 19:22
clamav-9ca4760c0c23a4104a9052c26df4d4ef
drwxr-xr-x 2 clamav clamav 4096 2008-03-24 07:54
clamav-9cf3f53395655b07168b28077a57fe5d
drwxr-xr-x 2 clamav clamav 4096 2008-03-04 03:18
clamav-9d49728b35a3fd23a1b941235511f1b5
drwxr-xr-x 2 clamav clamav 4096 2008-04-02 14:54
clamav-9f9138999d6e036f1e41253e09fd992c
drwxr-xr-x 2 clamav clamav 4096 2008-02-14 13:25
clamav-a04439bc931759cf90c786635b80efb2
drwxr-xr-x 2 clamav clamav 4096 2008-03-28 14:38
clamav-a2dc5536e0909f711e3f5e18f690ea10
drwxr-xr-x 2 clamav clamav 4096 2008-02-15 21:37
clamav-a34645bf6f318645fe3dc85524883e51
drwxr-xr-x 2 clamav clamav 4096 2008-04-06 22:42
clamav-a3a1d84dba7726db0bb6266f11f17daf
drwxr-xr-x 2 clamav clamav 4096 2008-04-01 06:31
clamav-a3eb1de7d8c20086d71d6c410803b040
drwxr-xr-x 2 clamav clamav 4096 2008-03-17 15:18
clamav-a4dff948cd79311918e9546726e986ef
drwxr-xr-x 2 clamav clamav 4096 2008-04-20 07:03
clamav-a5d0fc5939644b8a3e2d5498ee6b0c01
drwxr-xr-x 2 clamav clamav 4096 2008-03-03 19:09
clamav-a7cbbe881998aa5e2d2d3b8fcfb4d1e0
drwxr-xr-x 2 clamav clamav 4096 2008-02-27 11:29
clamav-a8028b13300c97b57ee1a7c46f41e272
drwxr-xr-x 2 clamav clamav 4096 2008-03-06 01:58
clamav-a8db41c50d7e43edf438fc1afd67ef4f
drwxr-xr-x 2 clamav clamav 4096 2008-05-01 21:59
clamav-a9415d87d7a3eca6a95467d6028e80c3
drwxr-xr-x 2 clamav clamav 4096 2008-03-11 16:04
clamav-aa3ae094890d63f42e7583faa499f18e
drwxr-xr-x 2 clamav clamav 4096 2008-03-16 16:56
clamav-ac0fcd219beb648273e653b7c503c684
drwxr-xr-x 2 clamav clamav 4096 2008-04-03 12:17
clamav-ac4c2000f9d38203a2b350031268dc71
drwxr-xr-x 2 clamav clamav 4096 2008-03-13 14:47
clamav-ae08be3dfda7ce11676d1890ea17bfc5
drwxr-xr-x 2 clamav clamav 4096 2008-03-12 18:31
clamav-aee225adb6cea5dce002735a4a62222e
drwxr-xr-x 2 clamav clamav 4096 2008-03-28 13:36
clamav-aee4c6e23a0dc9ff9aa92c02685aa3e1
drwxr-xr-x 2 clamav clamav 4096 2008-04-02 10:51
clamav-aee92b58f53b11fff9fc01a5609aad93
drwxr-xr-x 2 clamav clamav 4096 2008-02-12 13:30
clamav-b0d2e794737e5c7a37df24eb3a593a06
drwxr-xr-x 2 clamav clamav 4096 2008-04-04 14:45
clamav-b0e0941eb850045aa265ce04b6a4f499
drwxr-xr-x 2 clamav clamav 4096 2008-02-05 11:28
clamav-b0ff2bcee4552d74f458874c6544cdd6
drwxr-xr-x 2 clamav clamav 4096 2008-02-14 13:25
clamav-b1a6547267a9fa3e6dc21d836de8dd27
drwxr-xr-x 2 clamav clamav 4096 2008-02-20 04:56
clamav-b6212c1cf2be6563b59f2d0be8b93e1d
drwxr-xr-x 2 clamav clamav 4096 2008-04-08 20:30
clamav-b67b2af21f6706948ef94991b7224c63
drwxr-xr-x 2 clamav clamav 4096 2008-03-09 12:20
clamav-b8b110c55dd688b461a02c4da1fad8c5
drwxr-xr-x 2 clamav clamav 4096 2008-04-05 07:08
clamav-b8f9b2633542458dda5fb8580e80b9e2
drwxr-xr-x 2 clamav clamav 4096 2008-03-19 10:09
clamav-b9af778173f2982baca47b7d9a96999c
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 00:20
clamav-bad5901076b1c79b85ca8f5d7a338bb1
drwxr-xr-x 2 clamav clamav 4096 2008-02-26 08:11
clamav-bb0f24a526e6d976fffc7586e58f9471
drwxr-xr-x 2 clamav clamav 4096 2008-03-09 21:27
clamav-bd8ebe46031822601aa6c6193ace4e06
drwxr-xr-x 2 clamav clamav 4096 2008-04-24 03:20
clamav-be32e20398111d2e2ac400e43872ce7c
drwxr-xr-x 2 clamav clamav 4096 2007-12-31 03:27
clamav-beb8a3c06990ef4fbd1759bb0af94b53
drwxr-xr-x 2 clamav clamav 4096 2008-04-06 01:19
clamav-bf3aa28f512b7784586de446e911ebc0
drwxr-xr-x 2 clamav clamav 4096 2008-04-16 23:05
clamav-bf431a62b5e5ea3c5a2087976d05ab97
drwxr-xr-x 2 clamav clamav 4096 2008-02-04 11:20
clamav-c1f7993afc2e71030b21e23e941ed339
drwxr-xr-x 2 clamav clamav 4096 2008-03-18 09:34
clamav-c6ffbb383f8d568388adb3edd192bbe2
drwxr-xr-x 2 clamav clamav 4096 2008-03-19 06:02
clamav-c966d7fc070c1631fd24cccdfc0f281b
drwxr-xr-x 2 clamav clamav 4096 2008-04-01 00:20
clamav-ca857182cee94d3373d8db100f80af4c
drwxr-xr-x 2 clamav clamav 4096 2008-03-18 06:30
clamav-ca901f7061dc4772ddfdae1bca0bdf8e
drwxr-xr-x 2 clamav clamav 4096 2008-04-06 07:30
clamav-ccba304baa48d91d93db4e660f1b6acb
drwxr-xr-x 2 clamav clamav 4096 2008-03-16 23:06
clamav-ccf6152d31e38bd3543a88f3e52f7e00
drwxr-xr-x 2 clamav clamav 4096 2008-01-30 18:40
clamav-ceab58c1ff32f0ae7b6d9b48a84c75a3
drwxr-xr-x 2 clamav clamav 4096 2008-04-16 23:05
clamav-cf9c2a8f40ac7a1e323f7cd77a6bb668
drwxr-xr-x 2 clamav clamav 4096 2008-04-23 05:02
clamav-d018b96e6fae51b11965edd4f12b83df
drwxr-xr-x 2 clamav clamav 4096 2008-03-28 11:29
clamav-d1d70df74865fa6a6345c1ab023a8a63
drwxr-xr-x 2 clamav clamav 4096 2008-03-11 17:05
clamav-d271d7330ab18fc509464a897ca96334
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 10:48
clamav-d403bfaad805737a30d57220bf12f53c
drwxr-xr-x 2 clamav clamav 4096 2008-04-18 18:40
clamav-d436417a8b70c0d5fa4dd21e1b2a4fc8
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 01:52
clamav-d5872108ec8a5a7a61f5d86fe2bf9573
drwxr-xr-x 2 clamav clamav 4096 2008-03-04 11:27
clamav-d8d7a18a934f480e833af0a0ef43d654
drwxr-xr-x 2 clamav clamav 4096 2008-02-07 07:46
clamav-dbdb444b69bfe02ddbc7fd702c2c2e98
drwxr-xr-x 2 clamav clamav 4096 2008-02-03 22:16
clamav-de5e51e448eb098428cd3b820e8146a5
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 03:08
clamav-e028ce58520e9bdc95425dcaf3d2b941
drwxr-xr-x 2 clamav clamav 4096 2008-04-02 06:49
clamav-e18cceb50a3b781b062feb7d637b5057
drwxr-xr-x 2 clamav clamav 4096 2008-03-07 15:37
clamav-e1fd5b1844b5f1b95d8d020a7b07e7db
drwxr-xr-x 2 clamav clamav 4096 2008-03-19 06:00
clamav-e483b80353a7083e30929c71c6b72d07
drwxr-xr-x 2 clamav clamav 4096 2008-03-31 17:06
clamav-e4e1216b715b19b4449641ee23ff5958
drwxr-xr-x 2 clamav clamav 4096 2008-03-31 15:02
clamav-e4f668ff9ba81b1f7fbb53fbdd9720f8
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 01:46
clamav-e50d310501da0a85f476b400e5b4d4a4
drwxr-xr-x 2 clamav clamav 4096 2008-03-16 23:05
clamav-e5ed2cff5f13a0475f8242ca80cba3f2
drwxr-xr-x 2 clamav clamav 4096 2008-03-25 00:12
clamav-e7bff337dd1944ee35befbba7dcd868f
drwxr-xr-x 2 clamav clamav 4096 2008-03-18 20:44
clamav-ebc4caecd538227ded43506ddb4bd9c5
drwxr-xr-x 2 clamav clamav 4096 2008-03-20 02:20
clamav-ebd186917159fd914d27fff0400e690d
drwxr-xr-x 2 clamav clamav 4096 2008-02-03 01:08
clamav-ef1afd812b191d0014cdfa643347fe9a
drwxr-xr-x 2 clamav clamav 4096 2008-04-06 23:42
clamav-f02244a17cd583ff3b3da0d91c42d428
drwxr-xr-x 2 clamav clamav 4096 2008-04-07 08:38
clamav-f4132408d3394a5462ecb098d3a1d762
drwxr-xr-x 2 clamav clamav 4096 2008-04-03 00:08
clamav-f4f252e3f656bb5142c11bfb3b9b8ecd
drwxr-xr-x 2 clamav clamav 4096 2008-03-07 08:29
clamav-f6e31df8beb1f97ffaab7f70e9f53181
drwxr-xr-x 2 clamav clamav 4096 2008-04-02 14:55
clamav-fc00c93dd2304dd21745ae59f44a66bd
drwxr-xr-x 2 clamav clamav 4096 2008-03-30 04:22
clamav-fdc2fa04f8b16aa86d7f12e07658389e
drwxr-xr-x 2 clamav clamav 4096 2008-04-06 13:34
clamav-ff8a5a9434105a9fec8c784d711ca951
drwxr-xr-x 2 clamav clamav 4096 2008-03-28 13:35
clamav-fff7d5f2c76b84e9256f336fae0b781d
-rw-r--r-- 1 clamav clamav 9808384 2010-02-03 12:31 daily.cld
drwxr-xr-x 2 clamav clamav 4096 2008-06-13 08:37 daily.inc
-rw-r--r-- 1 clamav clamav 47079936 2009-05-14 17:28 main.cld
drwxr-xr-x 2 clamav clamav 4096 2008-06-13 08:37 main.inc
-rw------- 1 121 121 936 2007-11-28 13:25 mirrors.dat
-- System Information:
Debian Release: 5.0.3
APT prefers stable
APT policy: (990, 'stable'), (500, 'proposed-updates')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-2-686-bigmem (SMP w/4 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=UTF-8) (ignored: LC_ALL set to
en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages clamav-daemon depends on:
ii clamav-bas 0.95.3+dfsg-1~volatile1 anti-virus utility for Unix - base
ii clamav-fre 0.95.3+dfsg-1~volatile1 anti-virus utility for Unix - viru
ii libc6 2.7-18lenny2 GNU C Library: Shared libraries
ii libclamav6 0.95.3+dfsg-1~volatile1 anti-virus utility for Unix - libr
ii libncurses 5.7+20081213-1 shared libraries for terminal hand
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
ii ucf 3.0016 Update Configuration File: preserv
ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime
clamav-daemon recommends no packages.
Versions of packages clamav-daemon suggests:
pn clamav-docs <none> (no description available)
pn daemon <none> (no description available)
-- no debconf information
--
noris network AG - Deutschherrnstraße 15-19 - D-90429 Nürnberg -
Tel +49-911-9352-0 - Fax +49-911-9352-100
http://www.noris.de - The IT-Outsourcing Company
Vorstand: Ingo Kraupa (Vorsitzender), Joachim Astel, Hansjochen Klenk -
Vorsitzender des Aufsichtsrats: Stefan Schnabel - AG Nürnberg HRB 17689
signature.asc
Description: Digital signature
