Complete.Org: Mailing Lists: Archives: discussion: May 2002:
[aclug-L] Re: Klez, Fetchmail and Sendmail
Home

[aclug-L] Re: Klez, Fetchmail and Sendmail

[Top] [All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index] [Thread Index]
To: <discussion@xxxxxxxxx>
Subject: [aclug-L] Re: Klez, Fetchmail and Sendmail
From: Chris Owen <owenc@xxxxxxxxxx>
Date: Fri, 17 May 2002 10:53:03 -0500 (CDT)
Reply-to: discussion@xxxxxxxxx

On Fri, 17 May 2002, keith frost wrote:

> if a person is running say, outlook at home, and that person's ISP is
> running a mailserver with linux.  then that person gets a virus.  the
> linux mail server will very happily send all the emails just like it
> is supposed to.  this does not mean it is infected.
>
> yes, some sort of filter/viruswall would be helpful, but this does not
> mean that this machine is infected.

Exactly.  And with Klez it goes further than that.  Klez take advantage of
an specific exploit that is unique to Outlook.  In fact almost all of
these do. Klez for instance uses an exploit that doesn't even require the
receiver to open the email in order to be infected.  That is just wrong.
Avoiding Outlook will solve 90% of these things since they mostly live off
of Outlook specific exploits.

Avoiding ISPs that don't do virus scanning will avoid 100% ;-]

Chris

> --- David Carmichael <dec2955@xxxxxxxxxx> wrote:
> >
> > OK all I just received the 'Virus' that had started
> > showing up yesterday
> > with the header as if from:
> > Fetchmail (  fetchmail-announce@xxxxxxxxxxx )
> >    and
> > Sendmail
> > !!!!!!!!!!!
> >
> > Unless I am mistaken both of these are Linux based
> > email programs!!
> >
> > Boy am I glad that I am running 'Norton'!
> >
> > --David
> >
> >
> >
> >
> > -- This is the discussion@xxxxxxxxx list.  To
> > unsubscribe,
> > visit
> > http://www.complete.org/cgi-bin/listargate-aclug.cgi
> >
>
>
> =====
> phrostie
> Oh I have slipped the surly bonds of DOS
> and danced the skies on Linux silvered wings.
> http://pfrostie.freeservers.com/cad-tastrafy/
> http://www.freelists.org/webpage/cad-linux
>
> __________________________________________________
> Do You Yahoo!?
> LAUNCH - Your Yahoo! Music Experience
> http://launch.yahoo.com
> -- This is the discussion@xxxxxxxxx list.  To unsubscribe,
> visit http://www.complete.org/cgi-bin/listargate-aclug.cgi
>

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Chris Owen             ~  Hubris Communications  ~  Lottery (noun):
PO Box 1969            ~  120 S Market Suite 101 ~     A stupidity tax
Garden City, KS 67846  ~  Wichita, KS 67202      ~
Voice: (620) 275-1900  ~  Voice: (316) 858-3000  ~     www.hubris.net
Fax:   (620) 275-0313  ~  Fax:   (316) 858-3001  ~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi


[Prev in Thread] Current Thread [Next in Thread]