Re: netscape 4.61 recognizes file.changed-doc/xls

[ljoseph () RICHMOND EDU (Joseph, Lorne)]

I ran across the same problem while trying to set up sweeps on mail coming
in with attachments.  Netscape has a file association function like Windows
has to associate files with the application if you go to the application
section in the preferences section you can remove files that you don't want
associated.

Lorne Joseph

-----Original Message-----
From: Chad Thunberg [mailto:chadth () OBFUSTECH COM]
Sent: Tuesday, May 23, 2000 2:55 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: netscape 4.61 recognizes file.changed-doc/xls

Do to the increasing threat of viruses, I have added procmail filters to
mangle the .ext of attachments so users would have to rename the file after
saving the file to disk.  This gives our antivirus a chance to scan the file
and allows users 30secs to think about what they are doing.  What I have
noticed is, netscape mail (ver 4.61) recognizes attachments that have been
renamed.  We sent two seperate emails with attachments, one with test.doc
and one with test.xls.  Upon receiving the email, the attachment's name was
changed to test.1234DEFACED-DOC and test.1234DEFACED-XLS.  After double
clicking the attachments, netscape mail gives the user the option of opening
the file with winword.exe and excel.exe.  We also tested with .bat and
various other .ext but only winword and excel associated files were
recognized.  Can anyone else confirm or deny this?

Thanks,
Chad Thunberg