[ mailman-Bugs-1344305 ] trojan problem

[SourceForge.net]

Bugs item #1344305, was opened at 2005-10-31 21:30
Message generated for change (Comment added) made by david-powell
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=1344305&group_id=103

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: More Information Needed
Status: Open
Resolution: None
Priority: 5
Submitted By: dave the dragon (david-powell)
Assigned to: Nobody/Anonymous (nobody)
Summary: trojan problem

Initial Comment:
more a observed comment but may have other implications    
   
recently i was running bit defender antivirus on my pc    
and found it reported    
   
/usr/lib/mailman/tests/msgs/nimda.txt=>(IFRAME)  infected:   
Trojan.Exploit.Html.Iframe.Filedownload.AW <-   
cevakrnl.xmd   
   
from what i can gather the file is one used for testing    
(not shure if the actual exploit code needs to be there for   
that though)   
   
but it raises an issue    
   
in that because of the file being included in the distributed   
code it may cause some distributions from including the   
whole package in there distributions    
and may also possibaly in some cercumstances lead to 
legal action   
as it may be construded that this trojan code is being  
distributed   
   
just feel that  this should be pointed out to you  
  
Dave 

----------------------------------------------------------------------

>Comment By: dave the dragon (david-powell)
Date: 2005-11-01 01:33

Message:
Logged In: YES 
user_id=1175630

ok ty for the info , was just concerned that it may be a problem  
never had chance to look at the file the checker deleted it  
 
Dave  
 
  

----------------------------------------------------------------------

Comment By: Mark Sapiro (msapiro)
Date: 2005-10-31 22:17

Message:
Logged In: YES 
user_id=1123998

The file never contained any trojan code. It is safe to look at 
it and if you do, you'll see that it is mostly MIME headers and 
a few bits of innocuous content.

As of Mailman 2.1.6, the file is no longer in the distribution.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=1344305&group_id=103