[Declude.JunkMail] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Mon Mariola - Rubén
The program incredimail generates subjects, in certain cases, ended with 0D 0A 09 0D 0A. These messages are captured by Declude virus like Outlook 'Blank Folding' Vulnerability. I want to send a letter requesting to technical support solve this problem, but I really do not see the point 3.2.3

[Declude.Virus] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Mon Mariola - Rubén
The program incredimail generates subjects, in certain cases, ended with 0D 0A 09 0D 0A. These messages are captured by Declude virus like Outlook 'Blank Folding' Vulnerability. I want to send a letter requesting to technical support solve this problem, but I really do not see the point 3.2.3

Re: [Declude.Virus] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Matt
Ruben, In your Virus.cfg file, add the following line: ALLOWVULNERABILITYOLBLANKFOLDING This will turn off this vulnerability detection. There have been no viruses that I know of that have exploited this flaw, and it is quite possible that this flaw no longer exists since it is

Re: [Declude.Virus] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Mon Mariola - Rubén
Matt, So far, the only case where I find this vulnerability is in the mail sent from the program Incredimail. If these lines are actually prohibited in RFC, it is safer to seek Incredimail technical support to solve your problem. But I fear that the explanation in Declude manual is false

Re: [Declude.Virus] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Matt
Disable it and be done with it. There is no option to partially support the issue, and the issue is very likely not a threat. Just because something isn't RFC compliant doesn't mean that it is a threat. The vulnerability was from Outlook displaying attachments that were hidden by bad

Re: [Declude.Virus] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Randy Armbrecht
The AOL Feedback loop creates alot of these false positives also...we deactivated this test in our Declude a while back --- Randy A. Technical Support Director Global Web Solutions, Inc. 804-442-5300 http://globalweb.net - Original Message - From: Matt [EMAIL PROTECTED]