subject: HTA filtering
posted: Sun, 01 Aug 2004 10:52:23 +0100


Sadly, someone out there has realised they can MIME-encode their
malicious HTA's. This means that the current approach of searching
for the text filter on the following string:

Content-Disposition: attachment; filename="*.hta"

Note: this will cause you to filter all attachments whose extension
is HTA.

Stu

---
* Origin: [adminz] tech, security, support (192.168.0.2)

generated by msg2page 0.06 on Jul 21, 2006 at 19:04:11

 search: