Re: Another new worm???

[BlueBoar () THIEVCO COM (Blue Boar)]

sigipp () WELLA COM BR wrote:
> One more thing: For me it is simply impossible to "delete an offending e-mail
> with telnet". Not because i don´t know how to use telnet and the POP protocol.
> But simply because i don´t get my mail with the POP protocol, and not with smtp,
> either. I get my mail with Lotus Notes, and i don´t have any information about
> the underlying protocol (hint: if anyone has...). So simply assuming that the
> whole world should be able to do this or that is not appropriate. I still think,
> there are limits.

Notes is an interesting beast.  It's got LotusScript, it renders HTML, and
basically does all the bad things that the other full-featured MUAs do.
I don't think it's received enough attention from the attackers.  I think
part of the reason is that it's typically only used inside the hard shell,
and the Internet-exposed MTAs strip a lot of the evil.

Someone had asked who uses the scripting features in e-mail clients.  If
you count Notes, I've seen some fairly involved applications written in
Notes.  An old employer of mine did their entire purchase order system
in Notes.

                                        BB