[Mimedefang] sobig virus slipping by mcafee.

[David F. Skoll]

On Fri, 5 Sep 2003, Stefano McGhee wrote:

> The message seems to
> simply have the mime encoded text of the pif file in the body.

Some MTA's (qmail for one, I believe) blindly append the message text
to the bounce notification without attempting to create a proper MIME
message.  MIMEDefang won't see the virus, because it's just random
stuff inside a text/plain part.  If any Windows MUA is stooopid enough
to try to decode such a thing, then its authors deserve to be soundly
whipped. :-)

Regards,

David.