You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Brian Dessent <br...@dessent.net> on 2004/02/05 11:30:32 UTC
Re: [users@httpd] Subject: Our virus protected firewall showed this
virus warning when downloading httpd-2.0.48.tar.gz
James Harrison wrote:
> Security warning Exceed_Decompression_Layer in file httpd-2.0.48.tar.gz
Some scanning programs have a limit defined for the maximum path depth
or recursion depth of nested archives that they will decompress.
(Otherwise, you could send a carefully crafted archive) that would cause
the server to panic or run out of memory.) It appears the apache
package is triggering this.
> If this is a problem then how do I get a clean copy of this software.
Get a virus scanner that isn't terminally brain-dead.
Brian
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Subject: Our virus protected firewall showed this virus warning when downloading httpd-2.0.48.tar.gz
Posted by James Harrison <ja...@yahoo.co.uk>.
Hey nevermind. Thanks for everyone's advice.
I used a redhat src rpm package instead.
--- Brian Dessent <br...@dessent.net> wrote:
> James Harrison wrote:
>
> > Security warning Exceed_Decompression_Layer in file httpd-2.0.48.tar.gz
>
> Some scanning programs have a limit defined for the maximum path depth
> or recursion depth of nested archives that they will decompress.
> (Otherwise, you could send a carefully crafted archive) that would cause
> the server to panic or run out of memory.) It appears the apache
> package is triggering this.
>
> > If this is a problem then how do I get a clean copy of this software.
>
> Get a virus scanner that isn't terminally brain-dead.
>
> Brian
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
=====
James Harrison
__________________________________
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org