At 09:48 14/12/05 +0700, you wrote:
> The weakness is caused due to an error in the WorldClient webmail > when displaying the user's inbox when the "Subject" header of a > received email contains Javascript tags. This can be exploited to > prevent a user from correctly accessing his Inbox from the webmail > via a specially crafted email containing "<script></script>" in the > "Subject" field.
pak syafril, masih ingat e-mail saya via japri tentang hal ini? ternyata kolom "subject" memang bisa dijadikan sarana exploit dengan mengisikan kode2 tertentu (javascript) disitu. > SOLUTION:
> Filter emails containing potentially malicious scripts with an email > filtering gateway.
kira2 bagaimana cara filteringnya ya? -DM- -- --[MDaemon-L]------------------------------------------------ Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Mohon tidak posting dalam format HTML! Arsip : <http://mdaemon-l.dutaint.com> Henti Langgan : <mailto:[EMAIL PROTECTED]> Berlangganan : <mailto:[EMAIL PROTECTED]> Versi Terakhir : MD 8.1.3, LD 2.1.0, WA 3.1.6, MDAV 2.2.9, MDOC 2.0.5
