RE: [VulnDiscuss] Attachements pass through AntiGen

"Lawrence Pingree" <[email protected]> Sun, 17 Aug 2003 17:24:50 -0700
Newsgroups gmane.comp.security.vulnerabilities.watch.general
Message-ID <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAyJ4anTR0qEae8sCrGhr9bMKAAAAQAAAAJE+eTHVvgky3d5OBuNorbwEAAAAA@urs2.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

With further research, this was a configuration error which caused
the test.exe to pass. Please ignore my previous post. Thanks!


- -----Original Message-----
From: Larry Pingree [mailto:[email protected]] 
Sent: Friday, August 15, 2003 1:30 PM
To: [email protected]
Subject: [VulnDiscuss] Attachements pass through AntiGen


Antigen for Exchange passes any file with the filename of test.* even
if 
you are filtering the particular attachment extension.

So if you send test.exe and your filtering .exe files, you will be
able 
to bypass the attachment screening feature of Antigen.

I'm not sure which versions are affected.


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBP0Ac0mC8+QoSpEGjEQIH7QCfcg6WWcLVSk0ylyykUhaBa0szj6oAn3+b
AqVw4UWPzAqLp4s3PptTos+2
=Q0O4
-----END PGP SIGNATURE-----