Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Re: MIME::Tools Perl module and virus scanners

Re: MIME::Tools Perl module and virus scanners

From: Bennett Todd <bet_at_rahul.net>
Date: Tue, 4 Jun 2002 09:32:06 -0400

That's good research, and good work.

And I agree with the conclusion you implied:

> If you use MIMEDefang (which uses MIME::Tools), you may want to
> unconditionally call action_rebuild in filter_begin(). This
> forces the MIME message to be rebuilt by MIME::Tools, resulting in
> a valid MIME message.

That's the only approach that offers promise of settling this class
of problems.

Do MIME::Tools and/or MIMEDefang know about the punctuation marks
that some Windows MUAs silently ignore in filename extensions? How
about charset canonicalization, non-default (incorrect but commonly
accepted) UTF-8 encodings?

-Bennett

  • application/pgp-signature attachment: stored
Received on Jun 04 2002
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos