[Pkg-clamav-devel] Bug#568262: Segmentation fault in libclamav/matcher.c:cli_checkfp

Florian Forster octo at noris.net
Wed Feb 3 14:16:56 UTC 2010


Package: clamav-daemon
Version: 0.95.3+dfsg-1~volatile1
Severity: important
Tags: patch

Hi,

after upgrading to version 0.95.3+dfsg-1~volatile1 of the clamav
packages we encountered numerous crashes in clamd. The crashes appeared
about two days after upgrading but only on systems that had the new
version installed. I believe the combination of the new version and a
new / newly detected virus triggered a previously present but hardly
used code-path. The problem is very likely caused by an uninitialized
char-pointer.

This is a stack backtrace received from a core file and the debugging
package:

-- 8< --
#0  0xb7de061b in strlen () from /lib/libc.so.6
No symbol table info available.
#1  0xb7db03ec in vfprintf () from /lib/libc.so.6
No symbol table info available.
#2  0xb7dd2a64 in vsnprintf () from /lib/libc.so.6
No symbol table info available.
#3  0xb7f48373 in cli_dbgmsg_internal (str=0xb7f504b3 "FP SIGNATURE: %s:%u:%s\n") at others_common.c:115
        buff = "LibClamAV debug: FP SIGNATURE: 3b0fd4cdd5e315e38f30783d89c7866e:32093:\224u\222\f##\222##\177\024#z$2#(C\214J###Y#H\017^\230_H\214df###\037,\211*\206D\231##\224#\032##\004#ZF\2062#Q\206H29#\025#\2248?#\232#c\212\025##0\231#\002#\202###\005\232\222o\213\037}\031\035P\236:#\f#~M###\202##\003\236\207R\000#\035#\217\2079\027X#"...
#4  0xb7ed49e8 in cli_checkfp (fd=11, ctx=0xb15fef44) at matcher.c:247
        digest = (unsigned char *) 0xb0401528 ";\017####\025#\2170x=\211#\206n\030"
        md5 = "3b0fd4cdd5e315e38f30783d89c7866e"
        virname = <value optimized out>
        pos = 0
        sb = {st_dev = 2054, __pad1 = 0, st_ino = 1615785, st_mode = 33216, st_nlink = 1, st_uid = 0, st_gid = 0, st_rdev = 0, __pad2 = 0, st_size = 32093, st_blksize = 4096, st_blocks = 64, st_atim = {
    tv_sec = 1264616726, tv_nsec = 0}, st_mtim = {tv_sec = 1264616726, tv_nsec = 0}, st_ctim = {tv_sec = 1264616726, tv_nsec = 0}, __unused4 = 0, __unused5 = 0}
        patt = (const struct cli_bm_patt *) 0x0
#5  0xb7f16967 in lhdr (zip=0xb7c5f000 <Address 0xb7c5f000 out of bounds>, zsize=32043, fu=0xb15fd768, fc=1, ch=0xb7c66d05 <Address 0xb7c66d05 out of bounds>, ret=0xb15fd764, ctx=0xb15fef44, 
    tmpd=0xb0400a08 "/var/tmp/clamav-6e001ffbed4991639bd867cb211ae7f3", fd=11) at unzip.c:367
        name = "DHL_label_NR4719.exe\000\n@#@\031A#T!##\t}##`-\216", '\0' <repeats 152 times>, "QVx##gG#\030#\033#\017##s##\t\217\v\2219rG-##\002#\237(/#B\217#\024#\221\023\210o##\006#n\000\037##I\221c\233#g#!\032##"
        csize = <value optimized out>
        usize = <value optimized out>
        meta = (struct cli_meta_node *) 0xb6d4e064
#6  0xb7f17280 in cli_unzip (f=11, ctx=0xb15fef44) at unzip.c:473
        fc = 1
        fu = 0
        ret = 0
        fsize = 32093
        lhoff = <value optimized out>
        coff = <value optimized out>
        st = {st_dev = 2054, __pad1 = 0, st_ino = 1615785, st_mode = 33216, st_nlink = 1, st_uid = 0, st_gid = 0, st_rdev = 0, __pad2 = 0, st_size = 32093, st_blksize = 4096, st_blocks = 64, st_atim = {
    tv_sec = 1264616726, tv_nsec = 0}, st_mtim = {tv_sec = 1264616726, tv_nsec = 0}, st_ctim = {tv_sec = 1264616726, tv_nsec = 0}, __unused4 = 0, __unused5 = 0}
        map = (uint8_t *) 0xb7c5f000 <Address 0xb7c5f000 out of bounds>
        tmpd = 0xb0400a08 "/var/tmp/clamav-6e001ffbed4991639bd867cb211ae7f3"
#7  0xb7edfbc5 in cli_magic_scandesc (desc=11, ctx=0xb15fef44) at scanners.c:1946
        ret = 0
        type = CL_TYPE_ZIP
        dettype = 0
        sb = {st_dev = 2054, __pad1 = 0, st_ino = 1615785, st_mode = 33216, st_nlink = 1, st_uid = 0, st_gid = 0, st_rdev = 0, __pad2 = 0, st_size = 32093, st_blksize = 4096, st_blocks = 64, st_atim = {
    tv_sec = 1264616726, tv_nsec = 0}, st_mtim = {tv_sec = 1264616726, tv_nsec = 0}, st_ctim = {tv_sec = 1264616726, tv_nsec = 0}, __unused4 = 0, __unused5 = 0}
        typercg = <value optimized out>
#8  0xb7ee6559 in fileblobScan (fb=0xb0400a40) at blob.c:651
        rc = <value optimized out>
        ftype = 2
#9  0xb7ee6a13 in fileblobScanAndDestroy (fb=0xb0400a40) at blob.c:416
No locals.
#10 0xb7eee114 in do_multipart (mainMessage=0x0, messages=<value optimized out>, i=0, rc=0xb15fdbb8, mctx=0xb15febf8, messageIn=0xb04004c8, tptr=0xb15fdbb4, recursion_level=0) at mbox.c:5218
        fb = <value optimized out>
        addToText = false
        dtype = <value optimized out>
        aMessage = (message *) 0xb0400630
        doPhishingScan = 1
#11 0xb7eec8a8 in parseEmailBody (messageIn=0xb04004c8, textIn=0x0, mctx=0xb15febf8, recursion_level=0) at mbox.c:2458
        lines = 565
        m = (message **) 0xb0400a70
        old_rc = OK
        subtype = 5
        htmltextPart = <value optimized out>
        mimeSubtype = 0xb0400608 "mixed"
        boundary = 0xb0400970 "----------5FB15G4A919B1FH6"
        aMessage = <value optimized out>
        mimeType = <value optimized out>
        inhead = 0
        i = <value optimized out>
        t_line = (const text *) 0xb040f7f0
        multiparts = 0
        messages = (message **) 0xb0400a70
        rc = OK
        aText = (text *) 0x0
        mainMessage = (message *) 0x0
        fb = <value optimized out>
        infected = false
        engine = <value optimized out>
        doPhishingScan = 1
        addToText = false
        dtype = <value optimized out>
        aMessage = (message *) 0xb0400630
        doPhishingScan = 1
#12 0xb7eed27b in cli_parse_mbox (dir=0xb0400468 "/var/tmp/clamav-97bcb7d9c861910ade5829ff33df6bb7", desc=<value optimized out>, ctx=0xb15fef44) at mbox.c:1426
        retcode = 1
        i = <value optimized out>
        body = (message *) 0xb04004c8
        fd = (FILE *) 0xb04004c8
        mctx = {dir = 0xb0400468 "/var/tmp/clamav-97bcb7d9c861910ade5829ff33df6bb7", rfc821Table = 0x9f341f0, subtypeTable = 0x9f29b58, ctx = 0xb15fef44, files = 0}
        rfc821 = (table_t *) 0x9f341f0
        subtype = (table_t *) 0x9f29b58
#13 0xb7ee11ce in cli_scanmail (desc=10, ctx=0xb15fef44) at scanners.c:1566
        dir = 0xb0400468 "/var/tmp/clamav-97bcb7d9c861910ade5829ff33df6bb7"
        ret = 20
#14 0xb7edf6d8 in cli_magic_scandesc (desc=10, ctx=0xb15fef44) at scanners.c:2005
        ret = 0
        type = CL_TYPE_MAIL
        dettype = 0
        sb = {st_dev = 2054, __pad1 = 0, st_ino = 1747851, st_mode = 33184, st_nlink = 1, st_uid = 101, st_gid = 101, st_rdev = 0, __pad2 = 0, st_size = 44818, st_blksize = 4096, st_blocks = 88, st_atim = {
    tv_sec = 1264616726, tv_nsec = 0}, st_mtim = {tv_sec = 1264616726, tv_nsec = 0}, st_ctim = {tv_sec = 1264616726, tv_nsec = 0}, __unused4 = 0, __unused5 = 0}
        typercg = <value optimized out>
#15 0xb7ee086d in cl_scandesc (desc=10, virname=0xb15fefd8, scanned=0xb15ff2a4, engine=0x9f18c08, scanoptions=25143) at scanners.c:2160
        ctx = {virname = 0xb15fefd8, scanned = 0xb15ff2a4, root = 0x0, engine = 0x9f18c08, scansize = 77287, options = 25143, recursion = 2, scannedfiles = 3, found_possibly_unwanted = 0, dconf = 0xb7cb2134}
        rc = <value optimized out>
#16 0xb7ee08ed in cl_scanfile (filename=0xb0401488 "/var/spool/exim4/scan/1NaCZy-0006TJ-3e/1NaCZy-0006TJ-3e.eml", virname=0xb15fefd8, scanned=0xb15ff2a4, engine=0x9f18c08, scanoptions=25143) at scanners.c:2209
        fd = <value optimized out>
        ret = 8
-- >8 --

The problem is that in "cli_checkfp", the variable that should hold the
virus name contains an invalid value:
-- 8< --
(gdb) print *ctx->virname
$1 = 0x2 <Address 0x2 out of bounds>
-- >8 --
When trying to "print" the message this pointer is dereferenced which
causes the segmentation fault.

Because the pointer to the context structure, ctx, is passed around
within the library *a lot*, it is very hard to determine for sure where
this invalid content comes from. I believe that it originates from a
missing initialization in clamd/scanner.c:scan_callback, though. In that
function you can find the following code:
-- 8< --
  const char *virname;
  …
  ret = cl_scanfile(filename, &virname, &scandata->scanned, scandata->engine, scandata->options);
-- >8 --

In the (possibly rare) case that "virname" is never written to before it
reaches "cli_checkfp", the printing function there will try to access
random memory. In our case, the virus "Suspect.Bredozip-zippwd-2"
appears to have caused this condition reproducibly but due to the
productive nature of the system my possibilities to verify this are
limited.

I changed the declaration of the "virname" variable to include an
initialization, i.e.
-- 8< --
  const char *virname = NULL;
  …
  ret = cl_scanfile(filename, &virname, &scandata->scanned, scandata->engine, scandata->options);
-- >8 --
built and installed new (custom) packages and haven't observed a crash
since then; even though the above virus has been detected in the
meantime.

I believe the problem can be used for a denial of service attack. Please
consider promoting the bug to a security problem.

Regards,
—octo

-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav

Config file: clamd.conf
-----------------------
LogFile = "/var/log/clamav/clamav.log"
LogFileUnlock disabled
LogFileMaxSize disabled
LogTime = "yes"
LogClean = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose = "yes"
PidFile = "/var/run/clamav/clamd.pid"
TemporaryDirectory = "/var/tmp"
DatabaseDirectory = "/var/lib/clamav/"
LocalSocket = "/var/run/clamav/clamd.ctl"
FixStaleSocket = "yes"
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = "15"
StreamMaxLength = "10485760"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "12"
ReadTimeout = "180"
CommandReadTimeout = "5"
SendBufTimeout = "500"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath disabled
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
SelfCheck = "3600"
VirusEvent disabled
ExitOnOOM disabled
Foreground disabled
Debug = "yes"
LeaveTemporaryFiles disabled
User = "clamav"
AllowSupplementaryGroups = "yes"
DetectPUA disabled
ExcludePUA disabled
IncludePUA disabled
AlgorithmicDetection = "yes"
ScanPE = "yes"
ScanELF = "yes"
DetectBrokenExecutables disabled
ScanMail = "yes"
MailFollowURLs disabled
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
PhishingAlwaysBlockCloak disabled
PhishingAlwaysBlockSSLMismatch disabled
HeuristicScanPrecedence disabled
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
ScanPDF = "yes"
ScanArchive = "yes"
ArchiveBlockEncrypted disabled
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "5"
MaxFiles = "1000"
ClamukoScanOnAccess disabled
ClamukoScanOnOpen disabled
ClamukoScanOnClose disabled
ClamukoScanOnExec disabled
ClamukoIncludePath disabled
ClamukoExcludePath disabled
ClamukoMaxFileSize = "5242880"
DevACOnly disabled
DevACDepth disabled

Config file: freshclam.conf
---------------------------
LogFileMaxSize disabled
LogTime disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose disabled
PidFile = "/var/run/clamav/freshclam.pid"
DatabaseDirectory = "/var/lib/clamav/"
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = "/var/log/clamav/freshclam.log"
DatabaseOwner = "clamav"
Checks = "24"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.local.clamav.net", "database.clamav.net", "db.de.clamav.net"
MaxAttempts = "5"
ScriptedUpdates = "yes"
CompressLocalDatabase disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/etc/clamav/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "30"
ReceiveTimeout = "30"
SubmitDetectionStats disabled
DetectionStatsCountry disabled
SafeBrowsing disabled

clamav-milter.conf not found

Software settings
-----------------
Version: 0.95.3
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2 
Database directory: /var/lib/clamav/
main.cld: version 51, sigs: 545035, built on Thu May 14 16:28:45 2009
daily.cld: version 10354, sigs: 161600, built on Wed Feb  3 12:03:21 2010

--- data dir ---
total 56332
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 01:58 clamav-0115c042ad397d8e66358d168f951337
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 00:01 clamav-01d7bf025fd7a8974dab43a849d3fea5
drwxr-xr-x 2 clamav clamav     4096 2008-03-07 15:41 clamav-02ce1d0627fcb2012800b2a53c0f13f5
drwxr-xr-x 2 clamav clamav     4096 2008-04-04 15:45 clamav-0556428cd69394ff40e78870ed29c382
drwxr-xr-x 2 clamav clamav     4096 2008-03-20 18:34 clamav-09b46280d7363de5b7f2d3b649fa0fb7
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 16:58 clamav-09dc9150bb60d7f6df50d331a301657b
drwxr-xr-x 2 clamav clamav     4096 2008-03-19 03:57 clamav-0a72487b378eda937e1d4a9bf0dc06bd
drwxr-xr-x 2 clamav clamav     4096 2008-03-06 13:13 clamav-0c25118080bc971e95d712aba875eb31
drwxr-xr-x 2 clamav clamav     4096 2008-04-06 23:55 clamav-0daf9d927bf29339880f5e7267a265c2
drwxr-xr-x 2 clamav clamav     4096 2008-04-05 05:05 clamav-0e765d71e09aa15a3457a5423f017df2
drwxr-xr-x 2 clamav clamav     4096 2008-02-17 02:46 clamav-0ed3d85c4490e4307d32f10888412d8e
drwxr-xr-x 2 clamav clamav     4096 2008-03-27 16:03 clamav-122b4326e90b6f112395783bd06ab0e5
drwxr-xr-x 2 clamav clamav     4096 2008-03-10 11:39 clamav-16e8fe402659031dce8086ff87cd7720
drwxr-xr-x 2 clamav clamav     4096 2008-03-12 15:29 clamav-17e03bd85ceaad397eb0a6f64fd571a8
drwxr-xr-x 2 clamav clamav     4096 2008-04-05 04:03 clamav-18b15cfd45735fb7719deee8dc7c3182
drwxr-xr-x 2 clamav clamav     4096 2008-02-15 11:33 clamav-1a1743de164d55e92136321c3c905968
drwxr-xr-x 2 clamav clamav     4096 2008-02-04 18:22 clamav-1a5cd108c5aadd83779fa4f71bbaa67e
drwxr-xr-x 2 clamav clamav     4096 2008-02-28 14:50 clamav-1ae78dd5e96f2a54a5e0e2e122e0869f
drwxr-xr-x 2 clamav clamav     4096 2008-04-10 04:52 clamav-1d01b9691281837fdc61ae2bb9593fcb
drwxr-xr-x 2 clamav clamav     4096 2008-04-22 00:40 clamav-1d34a36d12ba70c4e0187418c7de09d0
drwxr-xr-x 2 clamav clamav     4096 2008-02-18 06:34 clamav-1dae1b81e8dc7fbc530c84dd88c025df
drwxr-xr-x 2 clamav clamav     4096 2008-02-18 00:32 clamav-1e64ceced0f5b208a5cc92dc478cfebb
drwxr-xr-x 2 clamav clamav     4096 2008-03-07 15:38 clamav-23f13c8363ea3073c18eff46133f42c6
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 12:54 clamav-26cbdb4078931dedff482c7248b145b8
drwxr-xr-x 2 clamav clamav     4096 2008-03-21 23:00 clamav-272b6f25fa26d276376f789a64c59ea3
drwxr-xr-x 2 clamav clamav     4096 2008-03-05 07:46 clamav-2a7bef799388c414c279c13164c0da97
drwxr-xr-x 2 clamav clamav     4096 2008-03-01 19:32 clamav-2b5c69c33034d20717e77a340a0006ab
drwxr-xr-x 2 clamav clamav     4096 2008-02-16 05:40 clamav-2bed2c834dcfe73ea35f2b6ec433db02
drwxr-xr-x 2 clamav clamav     4096 2008-03-30 04:23 clamav-2dd8cb739121beb985fc60f5e10dbc81
drwxr-xr-x 2 clamav clamav     4096 2008-02-04 06:19 clamav-2fbfa9d67af78549c5b6d0fe3bada68e
drwxr-xr-x 2 clamav clamav     4096 2008-04-03 03:10 clamav-339a35fdc0d97def8e50e7983703f6c0
drwxr-xr-x 2 clamav clamav     4096 2008-03-09 21:28 clamav-35f9226097bc7b63dbc579a2064528d3
drwxr-xr-x 2 clamav clamav     4096 2008-03-03 19:08 clamav-3655992ad23aaea307f4d1b3a882880e
drwxr-xr-x 2 clamav clamav     4096 2008-04-30 21:50 clamav-36cb45becc85d6d5b5896074d6f32d80
drwxr-xr-x 2 clamav clamav     4096 2008-02-04 11:20 clamav-372868bc64d5dcda83c25e8a45f9e224
drwxr-xr-x 2 clamav clamav     4096 2008-03-31 17:07 clamav-381a2a00e85db873ed21bcbfdbb42735
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 00:15 clamav-38fb1f4905c28e791c158ace74e55008
drwxr-xr-x 2 clamav clamav     4096 2008-04-16 02:45 clamav-39aa3af7a2222d9d29ac2e3cccbbc98d
drwxr-xr-x 2 clamav clamav     4096 2008-03-03 04:57 clamav-3b93a6c1b7b16c0ece65aa335c453d2d
drwxr-xr-x 2 clamav clamav     4096 2008-03-13 01:36 clamav-3ba90b1228ee83e33393b6c44517467d
drwxr-xr-x 2 clamav clamav     4096 2008-02-17 08:26 clamav-3d8eef6955d2c6b8bac011b65c6b2152
drwxr-xr-x 2 clamav clamav     4096 2008-02-12 10:28 clamav-3ec5c39a807054645a75c1498dae09e2
drwxr-xr-x 2 clamav clamav     4096 2008-02-06 15:39 clamav-4338497925555bb42d7d0c05dc12ab6a
drwxr-xr-x 2 clamav clamav     4096 2008-02-04 11:20 clamav-4726b02b8b998231e2f12f8b4a6ad742
drwxr-xr-x 2 clamav clamav     4096 2008-02-03 04:11 clamav-482ee484d9ebdf1330abe372bc5bd2e9
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 08:33 clamav-48e441893fa6269c3e891a97fb033ecd
drwxr-xr-x 2 clamav clamav     4096 2008-04-08 00:07 clamav-4c3dad5d717981f8a0c33412b502e760
drwxr-xr-x 2 clamav clamav     4096 2008-03-19 06:01 clamav-4d03e5d17b0d9bc206eda17cdf276509
drwxr-xr-x 2 clamav clamav     4096 2008-02-01 23:58 clamav-4ecc8d10bf1dc5b0a12d6e3fa6b0a394
drwxr-xr-x 2 clamav clamav     4096 2008-03-25 00:14 clamav-50e66c9b017076b2b98def289dee54cb
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 00:24 clamav-5234f04278c251c84027e7348a1527d4
drwxr-xr-x 2 clamav clamav     4096 2008-02-13 02:36 clamav-5335ba5e4eced7c7783e0ad3893134e2
drwxr-xr-x 2 clamav clamav     4096 2008-02-03 12:13 clamav-584e4fc3b9d669672c2fc77404ccc32d
drwxr-xr-x 2 clamav clamav     4096 2008-02-01 15:55 clamav-5a429faecf362f89d91e80900115c891
drwxr-xr-x 2 clamav clamav     4096 2008-02-23 17:38 clamav-5ff38b5d92f8bd41b12b4bed96c51b1d
drwxr-xr-x 2 clamav clamav     4096 2008-02-08 18:59 clamav-664c0c7096b67a41827681684af9a3e2
drwxr-xr-x 2 clamav clamav     4096 2008-03-31 18:10 clamav-66a543e84d328279e0d927782b9b8ef8
drwxr-xr-x 2 clamav clamav     4096 2008-01-02 18:44 clamav-672c0f5c22615e2cd8e40feb0eb55ef1
drwxr-xr-x 2 clamav clamav     4096 2008-02-13 06:37 clamav-68a7bbd1000e5bf3ef0d6dd9d536d2c6
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 01:39 clamav-698b5e07199f649e22ad685b57a251aa
drwxr-xr-x 2 clamav clamav     4096 2008-03-07 05:28 clamav-699ad625fe6990e1317476aab979786a
drwxr-xr-x 2 clamav clamav     4096 2008-05-01 22:00 clamav-6bec368e28d022096d39cfbaa91ec8ac
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 18:00 clamav-70b4db8cb42bae0b810d8513535f2a02
drwxr-xr-x 2 clamav clamav     4096 2008-04-06 23:48 clamav-715ddf9224e8d69eebf4329dad0cc4e2
drwxr-xr-x 2 clamav clamav     4096 2008-02-12 22:35 clamav-71826da0507beaa3ee241d776b39736d
drwxr-xr-x 2 clamav clamav     4096 2008-04-05 07:09 clamav-71c524a8043b1e75a2d6cfddc53c2901
drwxr-xr-x 2 clamav clamav     4096 2008-04-01 00:21 clamav-73249ff03234299ac4e11fbd3091ab60
drwxr-xr-x 2 clamav clamav     4096 2008-01-31 16:47 clamav-73540d3b91c576c3ea444d5729e56e9b
drwxr-xr-x 2 clamav clamav     4096 2008-04-23 05:01 clamav-77981dd6b49a6cd8fa992d15523e8aeb
drwxr-xr-x 2 clamav clamav     4096 2008-02-04 23:23 clamav-78d901273947a706f549537e88631d44
drwxr-xr-x 2 clamav clamav     4096 2008-02-10 21:16 clamav-7e1d9d891f15e97816acfb18eecac7f6
drwxr-xr-x 2 clamav clamav     4096 2008-03-18 23:50 clamav-7e7f2bb775295484d0147ce4ecba442a
drwxr-xr-x 2 clamav clamav     4096 2008-04-04 00:30 clamav-7e94fc43f7dea4078d5d0209ca120540
drwxr-xr-x 2 clamav clamav     4096 2008-02-12 13:30 clamav-8045efc63face5af701d3717715eff8a
drwxr-xr-x 2 clamav clamav     4096 2008-03-04 11:28 clamav-80c123d0318ff5709b2a46ad11576513
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 16:57 clamav-818dd008612e776c405730ba06c94271
drwxr-xr-x 2 clamav clamav     4096 2008-03-04 03:20 clamav-83befffa6a6e7b1b9e5b31f126e65e0b
drwxr-xr-x 2 clamav clamav     4096 2008-04-23 16:10 clamav-83ff8635c690e499e31af35a9086ea15
drwxr-xr-x 2 clamav clamav     4096 2008-02-15 21:37 clamav-84b9ec748b2d658e72f3a9b38c2a19ca
drwxr-xr-x 2 clamav clamav     4096 2008-03-27 08:59 clamav-8645fee30584c064db9f9112c2732dbb
drwxr-xr-x 2 clamav clamav     4096 2008-02-07 23:53 clamav-87a515ba0716ad485e3f0472c4fa31dd
drwxr-xr-x 2 clamav clamav     4096 2008-03-20 02:21 clamav-8850a54a925874fc4eefbcaa661f8c89
drwxr-xr-x 2 clamav clamav     4096 2008-03-29 21:11 clamav-8ef745ed2954eed2fbeabd5977f30c99
drwxr-xr-x 2 clamav clamav     4096 2008-04-03 00:08 clamav-8f90006e8e826f3aca9d9ac864798ac1
drwxr-xr-x 2 clamav clamav     4096 2008-02-06 00:32 clamav-8fe16ea25377dd6a0ac6a74f6e5108d4
drwxr-xr-x 2 clamav clamav     4096 2008-04-04 01:30 clamav-91517978a51402a06d70dc0e3d428f28
drwxr-xr-x 2 clamav clamav     4096 2008-03-01 17:27 clamav-917273ece82e937d888f21050c128df4
drwxr-xr-x 2 clamav clamav     4096 2008-03-25 01:17 clamav-91a63e053d86c3196ec4575e073f0dcd
drwxr-xr-x 2 clamav clamav     4096 2008-04-05 00:54 clamav-924cff2e0f9d05bce24c161d96548ee7
drwxr-xr-x 2 clamav clamav     4096 2008-03-11 09:56 clamav-932edb9b296d4a003d4041b8958c762c
drwxr-xr-x 2 clamav clamav     4096 2008-02-19 17:51 clamav-932eee84360b04166abf655c430d87c8
drwxr-xr-x 2 clamav clamav     4096 2008-04-01 00:22 clamav-94acb39282bf85e66ea22a0dfcf94e95
drwxr-xr-x 2 clamav clamav     4096 2008-04-05 04:03 clamav-953a703a04e0f75bcf18e0ae7a802420
drwxr-xr-x 2 clamav clamav     4096 2008-02-19 01:45 clamav-97791361bd79412d600d58bc5f1f4dc0
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 00:10 clamav-980df681c9141102d6731aa835733b37
drwxr-xr-x 2 clamav clamav     4096 2008-03-18 03:25 clamav-99796793a63d416f672f07e5fccd7068
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 01:41 clamav-9a3a44f9190856808ec7d856ec9658ab
drwxr-xr-x 2 clamav clamav     4096 2008-02-04 19:22 clamav-9ca4760c0c23a4104a9052c26df4d4ef
drwxr-xr-x 2 clamav clamav     4096 2008-03-24 07:54 clamav-9cf3f53395655b07168b28077a57fe5d
drwxr-xr-x 2 clamav clamav     4096 2008-03-04 03:18 clamav-9d49728b35a3fd23a1b941235511f1b5
drwxr-xr-x 2 clamav clamav     4096 2008-04-02 14:54 clamav-9f9138999d6e036f1e41253e09fd992c
drwxr-xr-x 2 clamav clamav     4096 2008-02-14 13:25 clamav-a04439bc931759cf90c786635b80efb2
drwxr-xr-x 2 clamav clamav     4096 2008-03-28 14:38 clamav-a2dc5536e0909f711e3f5e18f690ea10
drwxr-xr-x 2 clamav clamav     4096 2008-02-15 21:37 clamav-a34645bf6f318645fe3dc85524883e51
drwxr-xr-x 2 clamav clamav     4096 2008-04-06 22:42 clamav-a3a1d84dba7726db0bb6266f11f17daf
drwxr-xr-x 2 clamav clamav     4096 2008-04-01 06:31 clamav-a3eb1de7d8c20086d71d6c410803b040
drwxr-xr-x 2 clamav clamav     4096 2008-03-17 15:18 clamav-a4dff948cd79311918e9546726e986ef
drwxr-xr-x 2 clamav clamav     4096 2008-04-20 07:03 clamav-a5d0fc5939644b8a3e2d5498ee6b0c01
drwxr-xr-x 2 clamav clamav     4096 2008-03-03 19:09 clamav-a7cbbe881998aa5e2d2d3b8fcfb4d1e0
drwxr-xr-x 2 clamav clamav     4096 2008-02-27 11:29 clamav-a8028b13300c97b57ee1a7c46f41e272
drwxr-xr-x 2 clamav clamav     4096 2008-03-06 01:58 clamav-a8db41c50d7e43edf438fc1afd67ef4f
drwxr-xr-x 2 clamav clamav     4096 2008-05-01 21:59 clamav-a9415d87d7a3eca6a95467d6028e80c3
drwxr-xr-x 2 clamav clamav     4096 2008-03-11 16:04 clamav-aa3ae094890d63f42e7583faa499f18e
drwxr-xr-x 2 clamav clamav     4096 2008-03-16 16:56 clamav-ac0fcd219beb648273e653b7c503c684
drwxr-xr-x 2 clamav clamav     4096 2008-04-03 12:17 clamav-ac4c2000f9d38203a2b350031268dc71
drwxr-xr-x 2 clamav clamav     4096 2008-03-13 14:47 clamav-ae08be3dfda7ce11676d1890ea17bfc5
drwxr-xr-x 2 clamav clamav     4096 2008-03-12 18:31 clamav-aee225adb6cea5dce002735a4a62222e
drwxr-xr-x 2 clamav clamav     4096 2008-03-28 13:36 clamav-aee4c6e23a0dc9ff9aa92c02685aa3e1
drwxr-xr-x 2 clamav clamav     4096 2008-04-02 10:51 clamav-aee92b58f53b11fff9fc01a5609aad93
drwxr-xr-x 2 clamav clamav     4096 2008-02-12 13:30 clamav-b0d2e794737e5c7a37df24eb3a593a06
drwxr-xr-x 2 clamav clamav     4096 2008-04-04 14:45 clamav-b0e0941eb850045aa265ce04b6a4f499
drwxr-xr-x 2 clamav clamav     4096 2008-02-05 11:28 clamav-b0ff2bcee4552d74f458874c6544cdd6
drwxr-xr-x 2 clamav clamav     4096 2008-02-14 13:25 clamav-b1a6547267a9fa3e6dc21d836de8dd27
drwxr-xr-x 2 clamav clamav     4096 2008-02-20 04:56 clamav-b6212c1cf2be6563b59f2d0be8b93e1d
drwxr-xr-x 2 clamav clamav     4096 2008-04-08 20:30 clamav-b67b2af21f6706948ef94991b7224c63
drwxr-xr-x 2 clamav clamav     4096 2008-03-09 12:20 clamav-b8b110c55dd688b461a02c4da1fad8c5
drwxr-xr-x 2 clamav clamav     4096 2008-04-05 07:08 clamav-b8f9b2633542458dda5fb8580e80b9e2
drwxr-xr-x 2 clamav clamav     4096 2008-03-19 10:09 clamav-b9af778173f2982baca47b7d9a96999c
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 00:20 clamav-bad5901076b1c79b85ca8f5d7a338bb1
drwxr-xr-x 2 clamav clamav     4096 2008-02-26 08:11 clamav-bb0f24a526e6d976fffc7586e58f9471
drwxr-xr-x 2 clamav clamav     4096 2008-03-09 21:27 clamav-bd8ebe46031822601aa6c6193ace4e06
drwxr-xr-x 2 clamav clamav     4096 2008-04-24 03:20 clamav-be32e20398111d2e2ac400e43872ce7c
drwxr-xr-x 2 clamav clamav     4096 2007-12-31 03:27 clamav-beb8a3c06990ef4fbd1759bb0af94b53
drwxr-xr-x 2 clamav clamav     4096 2008-04-06 01:19 clamav-bf3aa28f512b7784586de446e911ebc0
drwxr-xr-x 2 clamav clamav     4096 2008-04-16 23:05 clamav-bf431a62b5e5ea3c5a2087976d05ab97
drwxr-xr-x 2 clamav clamav     4096 2008-02-04 11:20 clamav-c1f7993afc2e71030b21e23e941ed339
drwxr-xr-x 2 clamav clamav     4096 2008-03-18 09:34 clamav-c6ffbb383f8d568388adb3edd192bbe2
drwxr-xr-x 2 clamav clamav     4096 2008-03-19 06:02 clamav-c966d7fc070c1631fd24cccdfc0f281b
drwxr-xr-x 2 clamav clamav     4096 2008-04-01 00:20 clamav-ca857182cee94d3373d8db100f80af4c
drwxr-xr-x 2 clamav clamav     4096 2008-03-18 06:30 clamav-ca901f7061dc4772ddfdae1bca0bdf8e
drwxr-xr-x 2 clamav clamav     4096 2008-04-06 07:30 clamav-ccba304baa48d91d93db4e660f1b6acb
drwxr-xr-x 2 clamav clamav     4096 2008-03-16 23:06 clamav-ccf6152d31e38bd3543a88f3e52f7e00
drwxr-xr-x 2 clamav clamav     4096 2008-01-30 18:40 clamav-ceab58c1ff32f0ae7b6d9b48a84c75a3
drwxr-xr-x 2 clamav clamav     4096 2008-04-16 23:05 clamav-cf9c2a8f40ac7a1e323f7cd77a6bb668
drwxr-xr-x 2 clamav clamav     4096 2008-04-23 05:02 clamav-d018b96e6fae51b11965edd4f12b83df
drwxr-xr-x 2 clamav clamav     4096 2008-03-28 11:29 clamav-d1d70df74865fa6a6345c1ab023a8a63
drwxr-xr-x 2 clamav clamav     4096 2008-03-11 17:05 clamav-d271d7330ab18fc509464a897ca96334
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 10:48 clamav-d403bfaad805737a30d57220bf12f53c
drwxr-xr-x 2 clamav clamav     4096 2008-04-18 18:40 clamav-d436417a8b70c0d5fa4dd21e1b2a4fc8
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 01:52 clamav-d5872108ec8a5a7a61f5d86fe2bf9573
drwxr-xr-x 2 clamav clamav     4096 2008-03-04 11:27 clamav-d8d7a18a934f480e833af0a0ef43d654
drwxr-xr-x 2 clamav clamav     4096 2008-02-07 07:46 clamav-dbdb444b69bfe02ddbc7fd702c2c2e98
drwxr-xr-x 2 clamav clamav     4096 2008-02-03 22:16 clamav-de5e51e448eb098428cd3b820e8146a5
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 03:08 clamav-e028ce58520e9bdc95425dcaf3d2b941
drwxr-xr-x 2 clamav clamav     4096 2008-04-02 06:49 clamav-e18cceb50a3b781b062feb7d637b5057
drwxr-xr-x 2 clamav clamav     4096 2008-03-07 15:37 clamav-e1fd5b1844b5f1b95d8d020a7b07e7db
drwxr-xr-x 2 clamav clamav     4096 2008-03-19 06:00 clamav-e483b80353a7083e30929c71c6b72d07
drwxr-xr-x 2 clamav clamav     4096 2008-03-31 17:06 clamav-e4e1216b715b19b4449641ee23ff5958
drwxr-xr-x 2 clamav clamav     4096 2008-03-31 15:02 clamav-e4f668ff9ba81b1f7fbb53fbdd9720f8
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 01:46 clamav-e50d310501da0a85f476b400e5b4d4a4
drwxr-xr-x 2 clamav clamav     4096 2008-03-16 23:05 clamav-e5ed2cff5f13a0475f8242ca80cba3f2
drwxr-xr-x 2 clamav clamav     4096 2008-03-25 00:12 clamav-e7bff337dd1944ee35befbba7dcd868f
drwxr-xr-x 2 clamav clamav     4096 2008-03-18 20:44 clamav-ebc4caecd538227ded43506ddb4bd9c5
drwxr-xr-x 2 clamav clamav     4096 2008-03-20 02:20 clamav-ebd186917159fd914d27fff0400e690d
drwxr-xr-x 2 clamav clamav     4096 2008-02-03 01:08 clamav-ef1afd812b191d0014cdfa643347fe9a
drwxr-xr-x 2 clamav clamav     4096 2008-04-06 23:42 clamav-f02244a17cd583ff3b3da0d91c42d428
drwxr-xr-x 2 clamav clamav     4096 2008-04-07 08:38 clamav-f4132408d3394a5462ecb098d3a1d762
drwxr-xr-x 2 clamav clamav     4096 2008-04-03 00:08 clamav-f4f252e3f656bb5142c11bfb3b9b8ecd
drwxr-xr-x 2 clamav clamav     4096 2008-03-07 08:29 clamav-f6e31df8beb1f97ffaab7f70e9f53181
drwxr-xr-x 2 clamav clamav     4096 2008-04-02 14:55 clamav-fc00c93dd2304dd21745ae59f44a66bd
drwxr-xr-x 2 clamav clamav     4096 2008-03-30 04:22 clamav-fdc2fa04f8b16aa86d7f12e07658389e
drwxr-xr-x 2 clamav clamav     4096 2008-04-06 13:34 clamav-ff8a5a9434105a9fec8c784d711ca951
drwxr-xr-x 2 clamav clamav     4096 2008-03-28 13:35 clamav-fff7d5f2c76b84e9256f336fae0b781d
-rw-r--r-- 1 clamav clamav  9808384 2010-02-03 12:31 daily.cld
drwxr-xr-x 2 clamav clamav     4096 2008-06-13 08:37 daily.inc
-rw-r--r-- 1 clamav clamav 47079936 2009-05-14 17:28 main.cld
drwxr-xr-x 2 clamav clamav     4096 2008-06-13 08:37 main.inc
-rw------- 1    121    121      936 2007-11-28 13:25 mirrors.dat

-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'proposed-updates')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686-bigmem (SMP w/4 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages clamav-daemon depends on:
ii  clamav-bas 0.95.3+dfsg-1~volatile1       anti-virus utility for Unix - base
ii  clamav-fre 0.95.3+dfsg-1~volatile1       anti-virus utility for Unix - viru
ii  libc6      2.7-18lenny2                  GNU C Library: Shared libraries
ii  libclamav6 0.95.3+dfsg-1~volatile1       anti-virus utility for Unix - libr
ii  libncurses 5.7+20081213-1                shared libraries for terminal hand
ii  lsb-base   3.2-20                        Linux Standard Base 3.2 init scrip
ii  ucf        3.0016                        Update Configuration File: preserv
ii  zlib1g     1:1.2.3.3.dfsg-12             compression library - runtime

clamav-daemon recommends no packages.

Versions of packages clamav-daemon suggests:
pn  clamav-docs                   <none>     (no description available)
pn  daemon                        <none>     (no description available)

-- no debconf information

-- 
noris network AG - Deutschherrnstraße 15-19 - D-90429 Nürnberg -
Tel +49-911-9352-0 - Fax +49-911-9352-100

http://www.noris.de - The IT-Outsourcing Company

Vorstand: Ingo Kraupa (Vorsitzender), Joachim Astel, Hansjochen Klenk -
Vorsitzender des Aufsichtsrats: Stefan Schnabel - AG Nürnberg HRB 17689
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20100203/51830011/attachment-0001.pgp>


More information about the Pkg-clamav-devel mailing list