Penetration Testing mailing list archives

FAX virus


From: Alcides <alcides.hercules () gmail com>
Date: Wed, 07 Mar 2007 10:29:29 +0530


Hi list,

I have posted this earlier to security-basics list, but I got a few suggestions to post it here as well. I personally felt that I can get a better responses in technical sense here, hence decided to put this in front of you.
---------------------------->
My FAX server allows me to receive faxes from my clients from Internet.
My clients send me some documents using their built-in Fax Printer/other similar application on their PC. My fax server routes the stuff to the document processing(OCRing etc) applications. The document processing system extracts various data fields from received portable document format files. The whole scenario is windows environment and virus protection is temporarily off throughout the operations stated above.

Now, I have a query:
Can anyone send a fax that includes a file infected with the virus/ worm operates as a VBS script embedded within a PDF/TIF file to cause infections to my computers/ to affect my FAX system? What about other possibilities of "the bad guys" using some joiner (or wrapper as some say) to bind malware (trojan server etc) with the pdf/ TIF files and fax it to me?
I would be very thankful to know what are the various possibilities.
---------------------------->

Warm regards,
Alcides.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: