[Esd-l] NOTICE: you probably should add *.CPL to your poison list

John D. Hardin jhardin at impsec.org
Tue May 4 09:23:28 PDT 2004


Windows email worms have started using .CPL attachments for the attack
payload. *.CPL was not in the recommended poison list until last week;
if you are not mirroring the recommended poison list you may want to
make sure *.CPL appears in your poisoned or stripped attachments list.

 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org    FALaholic #11174    pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
  Bush? Kerry? I'm so sick of our elections always being "choose the
  lesser of two evils."
   182 days until the Presidential Election

More information about the esd-l mailing list