Norton Antivirus Corporate and Gateway Version (Latest) does not stop this.

Trying to get Covad to change something might be a problem.


----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, February 24, 2003 2:49 PM
Subject: Re: [Declude.JunkMail] Covad Invoice Virus


> A vulnerability is NOT a virus.  It is an E-mail that contains a flaw that
> viruses use, but may or may not actually contain a virus.
>
> In this case, the problem is that Covad is sending out E-mail with a
> dangerous vulnerability -- specifically, it is sending "pretend" MIME
> segments.  This will cause the E-mail to bypass mailserver AV scanning
> unless it is caught as a vulnerability.
>
> To fix the problem, Covad will need to send their mail properly.  We would
> be happy to work with them to get it so that they no longer send the
> dangerous vulnerability.
>
> Note that any up-to-date mailserver AV program should block this E-mail.
>                                                    -Scott
>
> At 02:39 PM 2/24/2003, you wrote:
> >Scott,
> >
> >Our servers are stoping Covad invoices as Virus. I contacted F-Prot
(Virus
> >Scanner) and they told me it has to do with Declude. Any thoughts. I have
> >the original email if you need.
> >
> >Fred
> >
> >
> >
> >Virus Scan v1.65 caught the [Outlook 'MIME segment in MIME Preamble'
> >Vulnerability] virus in [No attachment]
> >from [EMAIL PROTECTED]
> >
> >---
> >[This E-mail was scanned for viruses by Declude Virus
> >(http://www.declude.com)]
> >
> >---
> >This E-mail came from the Declude.JunkMail mailing list.  To
> >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >type "unsubscribe Declude.JunkMail".  The archives can be found
> >at http://www.mail-archive.com.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to