Re: disguised .exe files

On 03/17/2011 10:41 PM, Salvatore Toribio wrote:
> Hi
>
> I have done a quick check to the code in the current version and I 
> didn't find anything that would block an 'exe' file if you changed 
> the extension...
>

There is definitely code to do that. However, if Ethy has disabled it
via "--fix-mime 1" (or otherwise turning  $BAD_MIME_CHECKS below the
default value of "2"), then it won't trigger

I've just tested it - it works with "fix-mime" set to the default value
of 2. I sent a "Content-Type: image/XXX" email with "notepad.gif" -
which was an executable - it was blocked.


-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar