[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Full-Disclosure] Interscan - path disclosure - WAS:SpamAssasin - path disclosure
- To: "'morning_wood'" <se_cur_ity@hotmail.com>, "'ViLLaN'" <villain@protonic.com>, <full-disclosure@lists.netsys.com>
- Subject: RE: [Full-Disclosure] Interscan - path disclosure - WAS:SpamAssasin - path disclosure
- From: "Bojan Zdrnja" <Bojan.Zdrnja@LSS.hr>
- Date: Mon, 25 Aug 2003 15:14:29 +1200
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<TITLE>Message</TITLE>
<META content="MSHTML 6.00.2800.1226" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff size=2>First
of all, if you take a look at RFC822 you will see that X- headers stand for user
defined field.</FONT></SPAN></DIV>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff size=2>This
means that you can't really trust them - in this case, though, they were
probably correct and they related to spam filtering on behalf of
Spamassassin.</FONT></SPAN></DIV>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff size=2>Now
that we clarified what actually shows the path and that it has absolutely
nothing with Spamassassin, the answer for your question is - yes, Spamassassin
is often used with some antivirus programs.</FONT></SPAN></DIV>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff
size=2>Probably the best example of this is amavisd, which has integrated
support for various anti-virus engines as well as spamassassin for spam tagging
and filtering.</FONT></SPAN></DIV>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff
size=2>Regards,</FONT></SPAN></DIV>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=780581003-25082003><FONT face=Arial color=#0000ff size=2>Bojan
Zdrnja</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B>
full-disclosure-admin@lists.netsys.com
[mailto:full-disclosure-admin@lists.netsys.com] <B>On Behalf Of
</B>morning_wood<BR><B>Sent:</B> Monday, 25 August 2003 1:17
p.m.<BR><B>To:</B> ViLLaN; full-disclosure@lists.netsys.com<BR><B>Subject:</B>
[Full-Disclosure] Interscan - path disclosure - WAS:SpamAssasin - path
disclosure<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>ahhh, ok you are the first to
specifically state " <FONT color=#0000ff>section of the header
showing the path ".</FONT></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>thank you for the clarity. </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Trend Interscan Viruswall has a path
disclosure issue</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>So these products are often used in conjuntion
with each other?</FONT></DIV>
<DIV><FONT face=Arial size=2>Trend Interscan Viruswall and Spamassasin run on
the same box and combining thier output?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2> i think im going to turbocharge,
supercharge and nitrous my lawnmowers <A
href="http://www.briggsandstratton.com/"; target=nw><FONT size=3><FONT
color=#0000cc><B>Briggs</B> &
<B>Stratton</B></FONT></FONT></A>.</FONT></DIV>
<DIV><FONT face=Arial size=2>im sure i will cut more grass more better by
stacking products and solutions together instead</FONT></DIV>
<DIV><FONT face=Arial size=2>of purchasing the proper tool for the
job.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>morning_wood</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV>----- Original Message ----- </DIV>
<DIV><FONT color=#0000ff></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=villain@protonic.com href="mailto:villain@protonic.com";>ViLLaN</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=full-disclosure@lists.netsys.com
href="mailto:full-disclosure@lists.netsys.com";>full-disclosure@lists.netsys.com</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Sunday, August 24, 2003 5:41
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> RE: [Full-Disclosure]
SpamAssasin - path disclosure</DIV>
<DIV><FONT face=Arial size=2></FONT><BR></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=325193900-25082003>No
one is denying that Spamassasin is in use, they are saying that the section
of the header showing the path (what your original post was about from what
I understood), is Interscan, not Spamassasin.. </SPAN></FONT><FONT
face=Arial color=#0000ff size=2><SPAN
class=325193900-25082003> </SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=325193900-25082003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=325193900-25082003></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=325193900-25082003></SPAN></FONT> </DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>