On Wed, 13 Mar 2002, Chris Edwards wrote:
> On Wed, 13 Mar 2002, Hugh Sasse Staff Elec Eng wrote:
>
> | Using the Exim system_filter (Windows executable content filter) Version
[...]
> | http://www.eng.cse.dmu.ac.uk/~hgs/e-mail/test_multipart_exe
>
> This is the gibe worm:
>
> http://www.sarc.com/avcenter/venc/data/w32.gibe@mm.html
>
> The social engineering text body part contains some NULL charaters. In
> current versions of exim, the $message_body variable stops at the first
> NULL, causing the exe filter to miss the attachment.
>
> Philip has posted a patch for this - please see thread "NULL / filter"
> earlier this week.
OK, thanks. I saw those in the archive but didn't know they applied
here.
>
> Chris
>
Thank you,
Hugh
