[Esd-l] exe

[John D. Hardin]

On 25 Jun 2003, Martin Bourque wrote:

> We are seeing a large number of messages coming in right now (over 150
> today) with an attached file called your_details.zi->details.pif that
> seem to be getting by the sanitizer.  We have *.pif in the poisoned file
> list.  Have you seen this yet?

Yes, I have.

The sanitizer does not unwrap .ZIP files.

I am working on a local rule to trap this one. Check the mailing list
tomorrow morning.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.
                                            -- James Madison, 1799
-----------------------------------------------------------------------
   496 days until the Presidential Election