[VulnDiscuss] Attachements pass through AntiGen
"Larry Pingree" <[email protected]> Fri, 15 Aug 2003 13:30:29 -0700
| Newsgroups | gmane.comp.security.vulnerabilities.watch.general |
|---|---|
| Message-ID | <[email protected]> |
Antigen for Exchange passes any file with the filename of test.* even if you are filtering the particular attachment extension. So if you send test.exe and your filtering .exe files, you will be able to bypass the attachment screening feature of Antigen. I'm not sure which versions are affected.