Bugtraq mailing list archives
NAI WebShield SMTP does not scan base64 encoding
From: chris.paget () ANALYSYS COM (chris.paget () ANALYSYS COM)
Date: Tue, 20 Jun 2000 13:08:27 GMT
While investigating todays virus outbreak (Stages.Worm), I noticed that our email virus scanner (NAI WebShield SMTP 4.5, engine 4.0.50, DAT 4.0.4082, 14/06/00) was not picking up all attachments. The server is configured to block all SHS, VBS, etc attachments, and notify the sender. However, when these are sent as Base64 encoding (rather than 8-bit), they are passed by the server, and could potentially infect the network. 8-bit attachments are successfully scanned (and blocked if necessary). Chirs
Current thread:
- Re: Snort 1.6 and nmap 2.54beta1, (continued)
- Re: Snort 1.6 and nmap 2.54beta1 Martin Roesch (Jun 14)
- Re: Sendmail local root exploit on linux 2.2.x Mark K. Pettit (Jun 08)
- Reporting Security Issues to Microsoft Microsoft Security Response Center (Jun 08)
- Re: Sendmail local root exploit on linux 2.2.x Christophe GRENIER (Jun 08)
- arprelay: a tool to edit TCP connections in a LAN Felix von Leitner (Jun 09)
- Re: Sendmail local root exploit on linux 2.2.x Alan Iwi (Jun 12)
- Splitvt exploit syzop (Jun 14)
- Re: Splitvt exploit Joey Hess (Jun 14)
- Re: Splitvt exploit Andrey Savochkin (Jun 16)
- Re: Splitvt exploit Joey Hess (Jun 16)
- NAI WebShield SMTP does not scan base64 encoding chris.paget () ANALYSYS COM (Jun 20)
- Re: Splitvt exploit Joey Hess (Jun 14)
- Re: Splitvt exploit Kris Kennaway (Jun 15)
- Re-release of IIS 5.0 Patch for MS00-031 Microsoft Product Security (Jun 16)
- Infosec.20000617.panda.a Ian Vitek (Jun 17)
- Reliable Software Technologies releases new e-mail virus protection software Tim Hollebeek (Jun 14)
- Microsoft Security Bulletin (MS00-041) Microsoft Product Security (Jun 14)