procmail
[Top] [All Lists]

Re: Outlook Exploit Filter?

2000-07-21 15:44:04
Matt wrote,

| Is it possible for there to be more than one Date: header in a message
| (even if it's not legal)?   If so, and the second one has the overflow,
| the above recipe would miss it.

Yes, and I had been thinking of that and decided not to address it, but Matt
is right: for this problem, no scone should go unburned.  So as I read his
response, at this point, the rest was exactly what I was thinking.

| I don't know how likely this is,
| or whether Outlook would be affected by the repeated header fields,
| but it's just a thought....  Personally, i'm sticking with the non-
| scoring, lotsa-dots recipe.  :)

And that's a very good plan:

  :0 # forty-five periods
  * ^Date:.............................................
  /dev/null

For myself, I've already upgraded to OE 5.5, which isn't susceptible to that
bug.


_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail