Hi,
Why not just filter the <object> tags if you're going to put in place this
sort of filtering, as that appears to be where the problems comes in.
Steve
Steven Moore
Internet Development Engineer
Research Machines
+44 1235 823522
-----Original Message-----
From: Dan Shadix [mailto:[EMAIL PROTECTED]]
Sent: 19 July 2000 00:06
To: IMail_Forum
Subject: [IMail Forum] FW: MS vulnerability
I thought that this was important enough to post on the forum and I haven't
seen it mentioned here.
SANS Issued a FLASH message today describing a vulnerability that is
probably the most dangerous programming error in Windows workstation (all
varieties -- 95, 98, 2000, NT 4.0) that Microsoft has made.
You are vulnerable to total compromise simply by previewing or reading an
email (without opening any attachments) if you have one of the affected
operating systems and have the following installed:
Microsoft Access 97 or 2000
Internet Explorer 4.0 or higher, including 5.5 (Windows 2000 includes IE 5)
Go to http://www.sans.org/newlook/resources/win_flaw.htm for complete
details.
I have started filtering out HTML mail by looking for the html tag and head
tag (brackets removed so my filter doesn't block this) in message bodies.
Am I correct that this will catch all HTML e-mail, and if not what do I need
to look for?
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
STANDARD DISCLAIMER: This message is confidential. You should not copy it or
disclose its contents to anyone. You may use and apply the information only
for the intended purpose. Internet communications are not secure and
therefore RM does not accept legal responsibility for the contents of this
message. Any views or opinions presented are only those of the author and
not those of RM. If this email has come to you in error please delete it and
any attachments.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
