[Mimedefang] Virus that apparently "slips through" actually doesn't.

David F. Skoll dfs at roaringpenguin.com
Sat Dec 7 16:35:01 EST 2002


On Sat, 7 Dec 2002, Rudolf Christel Jr. wrote:

> Ok, but Norton AntiVirus catched it on a Windows computer, due the mail
> check.

Then Norton AntiVirus ignores RFC's.

> Is there any way to catched such "Text Virus".

No sane way.  You should not attempt to interpret the contents of
non-MIME messages.

> I understand, normal this mail would be no harm, but it´s a way to
> bypass an virusscanner, and that could be a security hole.

Well, only if your mail client disobeys RFC's.

> Any ideas what to do?

Sure; don't use Windows. :-)  But seriously, any software which extracts
parts from the Yahoo bounce message is very broken, and should not be
used.

Regards,

David.




More information about the MIMEDefang mailing list