Just to clarify one thing.  While there are certainly issues with tagging legitimate E-mail with the Outlook CR Vulnerability, it doesn't have problems specifically with any popular E-mail clients including Thunderbird.

The CR issues that were being tagged were likely the result of some sort of gateway that was modifying the headers on the way out of the sender's E-mail system where the headers were modified to contain a CR character instead of a CR & LF which is standard.  The sender's system should be fixed.  I certainly wouldn't frown upon turning off the detection for this.

Matt



Aaron Clausen wrote:
---------- Original Message ----------------------------------
From: "Colbeck, Andrew" <[EMAIL PROTECTED]>
Reply-To: [email protected]
Date:  Wed, 17 Aug 2005 11:01:48 -0700

  
A similar Outlook CR vulnerability was just discussed; check the
archives at:

http://www.mail-archive.com/declude.virus%40declude.com/msg12356.html

The same things would apply.  The manual does list the gory details of
what each vulnerability looks for, if you're interested.
    

So, what is the best solution?  Disable checking for this particular
vulnerability?

  

Reply via email to