Re: scary site

From: Favio Monill (favio@enredes.com.ar)
Date: 03/10/02 

From: "Favio Monill" <favio@enredes.com.ar>
To: "Tom Kapanka" <tom@kapanka.com>, <security-basics@security-focus.com>
Date: Sat, 9 Mar 2002 18:36:16 -0500

Outlook 6 can move messages...

Apply this rule after the message arrives
Where the To line contains 'security-basics@securityfocus.com'
or Where the CC line contains 'security-basics@securityfocus.com'
Move it to the Seguridad folder

Tools -- Message rules -- Mail

Regards

Favio Monill

----- Original Message -----
From: "Tom Kapanka" <tom@kapanka.com>
To: <security-basics@security-focus.com>
Sent: Friday, March 08, 2002 3:10 PM
Subject: RE: scary site

> Please move the security-focus@security-focus.com address from "cc:" to
> "to:" in this thread. Having it in the cc: field fails mine (and others')
> filter rules and there's no "cc:" option in the rules on Outlook,
therefore
> these all end up in my Inbox instead of my SecurityFocus folder.
>
> Thank you!
>
> ~Spanky
>
> > -----Original Message-----
> > From: [C] Teodorski, Chris [mailto:cteodorski@ppg.com]
> > Sent: Thursday, March 07, 2002 12:02 PM
> > To: 'Premek Marek'; leon
> > Cc: security-basics@security-focus.com
> > Subject: RE: scary site
> >
> >
> > Nothing happened here either....after I adjusted my security
> > level to high in IE.......security vs. usability.....once again......
> >
> > Seal it in concrete and through it off the dock.....then it'll be
> > secure.....
> >
> >
> >
> > -----Original Message-----
> > From: Premek Marek [mailto:premek@hosting.cz]
> > Sent: Wednesday, March 06, 2002 1:15 PM
> > To: leon
> > Cc: security-basics@security-focus.com
> > Subject: Re: scary site
> >
> >
> > > http://www.liquidwd.freeserve.co.uk/
> > > Try it with a windows machine and IE with all patches.
> > > Be afraid be very afraid.
> > > FYI this is for all those people who are think that just having a
> > > firewall is enough.
> > > Guess what?
> > > This works through packet filter, stateful inspection and proxy
> > > servers.
> >
> > Guess what?
> > nothing happened to me.
> > IE 5.0, win 2000, no patches, all settings set to default. (had to
reboot
> > from linux to test it :))
> > MSIE says page loaded with errors ..
> > C:/windows/system32/cmd.exe exists and is accessible.
> >
> > And why would you think that some packet filters and stateful inspection
> > could stop it?
> > Here you'd need content filter on some very high level to guess what
this
> > script could be doing.
> >
> > --
> > Premek Marek
> > Unix systems administrator, Hosting CZ s.r.o.
> > mailto:premek@hosting.cz tel: +420-602-386703
>
>

Quantcast