[Esd-l] Possibly Bugbear

[Howard Lowndes]

I have just had a client report that a virus has slipped through the
sanitizer.

I am suspicious that this may not be the case and have found the
following:

The attachment has a double extension with the full name being
>Content-Type: audio/x-midi;
>         name=amy & scott wedding menu kelly for erica.pub.scr

However, the attachment shows up as

Content-Type: application/octet-stream; name="amy"
Content-Disposition: attachment; filename="amy"
Content-Transfer-Encoding: base64

which might explain why it slipped thru the sanitizer.

My concern is, what would be the impact of a file name without an
extension?  Would M$ be smart enough to try to run it as an EXE, or is
there not a risk?

-- 
Howard.
LANNet Computing Associates - Your Linux people
Contact detail at http://www.lannetlinux.com
"Flatter government, not fatter government." - me
 Get rid of the Australian states.
------------------------------------------
If electricity comes from electrons, does morality come from morons?