[Esd-l] Triple extensions

John D. Hardin jhardin at impsec.org
Tue Feb 4 19:48:35 PST 2003


On Tue, 4 Feb 2003, Brett Glass wrote:

> At 02:44 PM 2/4/2003, John D. Hardin wrote:
> 
> >The attachment filename must be "carefully crafted" (your example
> >above won't work). 
> 
> Any information on HOW it must be crafted? Given the bugginess
> of Outlook, one might not need to be that careful. ;-)

:)

Nope. All I have is the vendor advisories (all of which have ben
referenced here, I think) and which are naturally somewhat sparse on
details. I can't find anything about it on bugtraq either.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.
                                            -- James Madison, 1799
-----------------------------------------------------------------------
   637 days until the Presidential Election



More information about the esd-l mailing list