[Esa-l] ANN: beta release 1.136pre6

John D. Hardin jhardin at impsec.org
Sat Oct 5 16:53:37 PDT 2002


Now available. New features:

- Mangle MIME type to TEXT/PLAIN instead of APPLICATION/OCTET-STREAM
to (hopefully) prevent magic scanning and execution. (Suggestions for
better handling are welcome. TEXT/NONTEXT maybe? :)

- Detect MSWord INCLUDETEXT and INCLUDEPICTURE as an attack in macro
scanner.

If you'd like to be able to control the INCLUDE* test via an env var
(i.e. not always consider it an attack), let me know.

- Special case for sender detection in messages from AOL.


Testing and feedback encouraged.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...the Fates notice those who buy chainsaws...
                                              -- www.darwinawards.com
-----------------------------------------------------------------------
   74 days until The Two Towers



More information about the esa-l mailing list