RE: [VulnDiscuss] Attachements pass through AntiGen
"Lawrence Pingree" <[email protected]> Sun, 17 Aug 2003 17:24:50 -0700
| Newsgroups | gmane.comp.security.vulnerabilities.watch.general |
|---|---|
| Message-ID | <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAyJ4anTR0qEae8sCrGhr9bMKAAAAQAAAAJE+eTHVvgky3d5OBuNorbwEAAAAA@urs2.net> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 With further research, this was a configuration error which caused the test.exe to pass. Please ignore my previous post. Thanks! - -----Original Message----- From: Larry Pingree [mailto:[email protected]] Sent: Friday, August 15, 2003 1:30 PM To: [email protected] Subject: [VulnDiscuss] Attachements pass through AntiGen Antigen for Exchange passes any file with the filename of test.* even if you are filtering the particular attachment extension. So if you send test.exe and your filtering .exe files, you will be able to bypass the attachment screening feature of Antigen. I'm not sure which versions are affected. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com> iQA/AwUBP0Ac0mC8+QoSpEGjEQIH7QCfcg6WWcLVSk0ylyykUhaBa0szj6oAn3+b AqVw4UWPzAqLp4s3PptTos+2 =Q0O4 -----END PGP SIGNATURE-----