[Dshield] Decompression Bombs

Lane Weast lweast at leeclerk.org
Thu Feb 5 18:15:04 GMT 2004


NAI 4.5.1 flags it as a Trojan.

> -----Original Message-----
> From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
> Behalf Of Tom Geairn
> Sent: Thursday, February 05, 2004 12:11 PM
> To: General DShield Discussion List
> Subject: RE: [SPAM Rating - Very High] RE: [Dshield] 
> Decompression Bombs
> 
> 
> For those wanting to test/break something, you can download the file
> from http://www.unforgettable.dk/42.zip.
> 
> It's a 42k zip file that contains 16 zip files, each with 16 
> zip files,
> each with 16 zip files, with 16 zips, with 16 zips, which 
> each contain a
> single 4.3GB file.  Total extracted filesize (without overhead) of
> 4,503,599,626,321,920 bytes.
> 
> Please use this ONLY to test your own systems.
> 
> 
> -----Original Message-----
> From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On
> Behalf Of Mike Blomgren
> Sent: Thursday, February 05, 2004 10:44 AM
> To: list at dshield.org
> Subject: RE: [Dshield] Decompression Bombs
> 
> This has been known for some time. There's a .zip floating 
> around called
> 42.zip which does just that. It supposedly creates a 
> hierarchy of files
> totalling 4.5PB. That's Peta Bytes. Unverified, though...
> 
> ~Mike
> 
> 
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
> 




More information about the list mailing list