09 November 2010, 16:23
Security update for HAVP anti-virus proxy
Small but important: a missing dot in one of the entries on the whitelist provided with the Http Anti-Virus Proxy (HAVP) allows attackers to inject malware. The whitelist at /etc/havp/whitelist includes the entry *sourceforge.net/*clamav-* . However, a missing dot in front of sourceforge unfortunately causes HAVP to disregard content from other domains that end in sourceforge.net, for example www.malwarefromsourceforge.net.
HAVP update 0.92a has the single purpose of adding a dot to the whitelist entry: *.sourceforge.net/*clamav-*.
The feature article from The H Security entitled "Using the HAVP anti-virus proxy to protect from web attacks" demonstrates how to install and configure HAVP in only a few steps.
(crve)
Print Version | Send by email
| Permalink: http://h-online.com/-1133479
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
