Re: Help for a newbie

On Thu, Feb 05, 2004 at 11:27:10AM +0100, Andrzej Kukula wrote:
> I think if you forward a mail message, the virus will be detected. The
> problem is with bounces without MIME headers. 

I don't think this is the problem this time, because:
** Unfortunately sophie can't see the virus yet. I tested CGPSophos
** executable file (CGPro plugin) to try to find the virus, and it
** actually finds the virus.

> It is SERIOUS VULNERABILITY. I can prepare a mail message that won't
> appear to be a bounce, but will be, and it will carry a virus and let it
> through undetected. User then will doubleclick it in their Outlook
> [Express] and execute the virus. I just don't want to post the recipe on
> a public mailing list.

Oh my god ... do you really think virus programmers are such dumb
idiots? Then you are making the big mistake undervaluing your enemies.
And they are using that "trick" for years.
And also MTAs should be fixed to generate such idiotic error reports.
The whole Internet need to be fixed. Film at 11.

> I think it should be fixed ASAP.

Yes, fixed by Microsoft.
They should stop mangling text messages and interpreting them in special
ways which they shouldn't have started the first time (like with inline
uucenoded data).
But like always the excuse is "be liberal in what you accept" *argh*

	\Maex

-- 
SpaceNet AG            | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0
Research & Development |       D-80807 Muenchen    | Fax: +49 (89) 32356-299
"The security, stability and reliability of a computer system is reciprocally
 proportional to the amount of vacuity between the ears of the admin"