On Fri, 28 Jun 2002 22:38:45 -0400, Clarence Verge wrote:

> On Fri, 28 Jun 2002 20:35:01 -0500, Glenn McCorkle wrote:

>> Well, you got to me thinking. ;-)

>> She was not 100% safe after-all.

>> If someone DID uncomment these lines.
>> Arachne would "branch-out" and run the executable file.

>> --- current lines in MIME.CFG ---
>> ;Try to uncomment following, and you will have MSIE 9.0 style desktop ;-)
>> ;(note: extension .com must preceed .c, etc.)
>> ;file/.exe |@$1
>> ;file/.com |@$1
>> ;file/.bat |@$1
>> _________________________________

>> With THESE lines.......

>> --- proposed new lines for MIME.CFG ---
>> ;Uncomment these 3 lines to check executable files for virus infection.
>> ;file/.exe >TXT|@c:\\fprot\\f-prot.exe /beep /noboot /packed $1>$2
>> ;file/.com >TXT|@c:\\fprot\\f-prot.exe /beep /noboot /packed $1>$2
>> ;file/.bat >TXT|@c:\\fprot\\f-prot.exe /beep /noboot /packed $1>$2
>> ;Get F-PROT here.... http://www.complex.is/f-prot/download/
>> ___________________________________

>> NOW she's 100% safe.

> Just delete those first 5 lines currently in mime.cfg and only the crazy
> will have a problem. Most of the crazies run Wincrap so no one here will
> miss those lines. <g>

> But she still won't be 100% safe.
> As far as *I* know, she is vulnerable to the overflow gambit in many
> areas. The chances of anyone bothering to test for and exploit these
> cracks in the armour are pretty slim tho. What's the point of trying
> to annoy a few dinosaurs ? <G>

> Of course, if you make it a CHALLENGE ...

> /> ____

>> Here are the results of "linking to" 2 executable files with Arachne.
>> http://www.angelfire.com/id/glenndoom/images.htm
>> 100percentsafe.gif
>> no_fear_from_klez.gif

Sure, you can "overflow" any web browser.

But that's not a virus or a worm.

AFAIK,
Causing an "overflow" can't damage anything on the
recipients computer system.

And it most certainly can't be spread around the web and email system
without the person who received it intentionally re-sending it.

So,
I'll stick with my assertion that Arachne *IS* 100% safe from
infection by virii and worms.

-- 
 Glenn
 http://arachne.cz/
 http://www.delorie.com/listserv/mime/
 http://www.angelfire.com/id/glenndoom/download.htm
 http://www.thispagecannotbedisplayed.com/

Reply via email to