OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Outlook Express feature could crash e-mail servers
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Outlook Express feature could crash e-mail servers

  • To: NTBUGTRAQLISTSERV.NTBUGTRAQ.COM
  • Subject: Re: Outlook Express feature could crash e-mail servers
  • From: David LeBlanc <dleblancISS.NET>
  • Date: Wed, 17 Jun 1998 15:37:05 -0400
  • Comments: To: Denis Phillips <dpDMXINC.COM>
  • In-Reply-To: <199806171918.PAA26678loki.iss.net>
  • Reply-To: David LeBlanc <dleblancISS.NET>
  • Sender: Windows NT BugTraq Mailing List <NTBUGTRAQLISTSERV.NTBUGTRAQ.COM>
At 10:50 6/17/98 -0400, Denis Phillips wrote:
>FOR IMMEDIATE RELEASE:

<snip>
ROTFLMAO

>*******

>I could agree that it may be appropriate for Microsoft to warn the user
>of the danger of a large attachment; this may be good policy. But the
>idea that this represents a means of attack that is not possible without
>the "bug" in outlook is absurd. As Russ said, any one could cobble
>together a client app to have the same effect (and probably more
>efficiently and stealthily too).

Agreed - however, this does lead me to suggest a feature for outlook.  It
would be nice if the app would warn users if they were sending an
attachment that was bigger than some configurable setting.  Say a default
of 1MB would be nice.

We had a user send a 16MB Powerpoint file one time, which then kept
bouncing, and it beat the poor sendmail daemon silly.  The admin was not
amused.  The user had no idea how big it was.


-----------------------------------------------------------
David LeBlanc
Internet Security Systems, Inc. | Voice: (678)443-6138
300 Embassy Row.                | Fax:   (678)443-6479
6000 Peachtree-Dunwoody Road NE | E-Mail:  dleblanciss.net
Atlanta, GA 30328               | www: http://www.iss.net/