Ethereal-dev: Re: [Ethereal-dev] test

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gerald Combs <gerald@xxxxxxxxxxxx>
Date: Fri, 30 Jan 2004 09:43:49 -0600
A virus also managed to slip through on Monday:

    http://www.ethereal.com/lists/ethereal-users/200401/msg00217.html

The attachments have been removed from the mailing list archives for both messages.

I'm surprised this hasn't happened more often this week. Since Monday over 3300 messages have been held for approval on the Ethereal mailing lists. This is an order of magnitude more than normal, and I've been deleting held messages using 'rm' at a shell prompt instead of Mailman's web interface. The majority of these have been warnings from virus scanners, infected messages, and spam. Comparitively few have been valid posts. In order for a virus to make it to the list it has to be "from" an address that's subscribed _and_ not be in our virus scanner's database (assuming the list admin doesn't accidentally approve a virus message).

This sucks.  Hopefully the flow will start dwindling soon.



Biot Olivier wrote:

This *is* a mailer virus, however the virus scanners won't recognize it as
the MIME headers have been obfuscated (self-modifying code).

| -----Original Message-----
| From: Joerg Mayer
| | On Mon, Feb 02, 2004 at 01:07:07AM +0900, mike@xxxxxxxxxxxx wrote: | > The message contains MIME-encoded graphics and has been | sent as a binary attachment. | | Possibly a virus - nothing of interest to ethereal-dev
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev