I think filtering out ALL html mail is a little harsh, don't you think?
Wouldn't a little user education and disabling the preview pane be a more
user-friendly approach?
Just my 2 bits.
Ryan LaMarre
Computer Support Specialist
Unity College
Unity, ME 04988
(207) 948-3131 x298
[EMAIL PROTECTED]
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Dan Shadix
Sent: Tuesday, July 18, 2000 7:06 PM
To: IMail_Forum
Subject: [IMail Forum] FW: MS vulnerability
I thought that this was important enough to post on the forum and I haven't
seen it mentioned here.
SANS Issued a FLASH message today describing a vulnerability that is
probably the most dangerous programming error in Windows workstation (all
varieties -- 95, 98, 2000, NT 4.0) that Microsoft has made.
You are vulnerable to total compromise simply by previewing or reading an
email (without opening any attachments) if you have one of the affected
operating systems and have the following installed:
Microsoft Access 97 or 2000
Internet Explorer 4.0 or higher, including 5.5 (Windows 2000 includes IE 5)
Go to http://www.sans.org/newlook/resources/win_flaw.htm for complete
details.
I have started filtering out HTML mail by looking for the html tag and head
tag (brackets removed so my filter doesn't block this) in message bodies.
Am I correct that this will catch all HTML e-mail, and if not what do I need
to look for?
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
