RE: Please tell me I'm wrong: microsoft.com infected
From: Boyan Krosnov (bkrosnov@lirex.bg)Date: 09/20/01
- Previous message: Craig Humphrey: "RE: Please tell me I'm wrong: microsoft.com infected"
- Maybe in reply to: Steve Cody: "Please tell me I'm wrong: microsoft.com infected"
- Next in thread: Dave Hart: "RE: Please tell me I'm wrong: microsoft.com infected"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Subject: RE: Please tell me I'm wrong: microsoft.com infected Date: Thu, 20 Sep 2001 01:53:38 +0300 Message-ID: <3FAEA93E6179FA4FBB329456D0A9054A6E9CE1@tquila.lirex.com> From: "Boyan Krosnov" <bkrosnov@lirex.bg> To: <incidents@securityfocus.com>
Most probably .eml-s don't get distributed through AKAMAI. And that
saves the unpatched users.
Have fun,
Boyan
> -----Original Message-----
> From: Jon Zobrist [mailto:kgb@ussr.com]
> Sent: Thursday, September 20, 2001 1:17 AM
> To: Steve Cody; incidents@securityfocus.com
> Subject: Re: Please tell me I'm wrong: microsoft.com infected
>
>
> Verified...
>
> source on page includes .eml on the bottom...
> <html><script language="JavaScript">window.open("readme.eml", null,
> "resizable=no,top=6000,left=6000")</script></html>
>
> Although the page the pop up on mine said, 404:page not
> found...So they must
> have removed the readme.eml
>
> -Jon
>
> RedHat 7.1
> Mozilla 0.9.3
>
>
> On Wednesday 19 September 2001 01:37 pm, Steve Cody wrote:
> > I just went to http://www.microsoft.com/frontpage, and my Symantec
> > Norton Antivirus popped up and denied access to readme.eml.
> >
> > I could not view the source of the loaded page, so I can't
> verify that
> > it is definitely infected.
> >
> > Steve
> >
> >
> >
> --------------------------------------------------------------
> -------------
> >- This list is provided by the SecurityFocus ARIS analyzer service.
> > For more information on this free incident handling, management
> > and tracking system please see: http://aris.securityfocus.com
>
> --------------------------------------------------------------
> --------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management
> and tracking system please see: http://aris.securityfocus.com
>
>
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
- Previous message: Craig Humphrey: "RE: Please tell me I'm wrong: microsoft.com infected"
- Maybe in reply to: Steve Cody: "Please tell me I'm wrong: microsoft.com infected"
- Next in thread: Dave Hart: "RE: Please tell me I'm wrong: microsoft.com infected"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
