Re: [Exim] Generic VBS script detection - filter attached (…

Top Page
Delete this message
Reply to this message
Author: I. Forbes
Date:  
To: Exim
Subject: Re: [Exim] Generic VBS script detection - filter attached (fwd)
Hello Nigel

On 9 May 00, at 9:41, Nigel Metheringham wrote:

> iforbes@??? said:
> > I think that there is a bug in this filter. I sent an attached VB
> > script with "Pegasus Mail" and it went straight through. (I am not
> > sure of Pegasus could be used by VB to send mail via Mappi ... but it
> > may be worth sorting this out).
>
> Content-type: text/plain; charset=US-ASCII
> Content-transfer-encoding: 7BIT
> Content-description: Text from file 'LOVE-LETTER-FOR-YOU.TXT.vbs'


> I don't propose to fix that - currently I don't see how that can be
> executable.


You are correct.

> If that message is received by a pegasus or other MUA does the
> part show as an attachment (or an inline text/plain),


It shows it as an attachement.

> and does double-clicking (or whatever) the attachment execute it
> as VBS?


No. Pegasus has an option to "view" an attachment which
"launches an application to view the file". On this attachement it
launches the Notepad editor.


---------------------------------------------------------------------
Ian Forbes ZSD
http://www.zsd.co.za
Office: +27 +21 683-1388 Fax: +27 +21 64-1106
Snail Mail: P.O. Box 46827, Glosderry, 7702, South Africa
---------------------------------------------------------------------