Declude Virus and F-Prot reported

X-Declude-Virus: Detected [Partial Vulnerability].

This is an e-mail that has been cut into 5 part and it has a PDF
attached to it.

That's the vulnerability -- a single attachment that has been split into multiple E-mails. This was cool in the early 90's to bypass the 50K size limit for E-mails. But today, it is not necessary, and causes a vulnerability (if not blocked, viruses could spread that way).


We stopped the 5 e-mails but why would it have triggered on a PDF file?

Also how does the client out the PDF back together???

A mail client that gets all 5 parts should (if it supposed split E-mails) be able to automagically put them back together into one E-mail.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to