The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via small files.Referenceshttp://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdfhttp://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdfhttp://secunia.com/advisories/25957http://osvdb.org/37973