Problem with "Possible Microsoft security vulnerability attack" detection on version 3.23-1??

[Maurizio Matteo Munafo']

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 25 September 2002 04:15, Tan Siew Wu wrote:
> Hi all,
> I just upgraded to 3.23-1 two days ago.  Everything is working fine except
> that there are unusual amount of detection on "Possible Microsoft security
> vulnerability attack".  I was on 3.21-1 and guess this was not part of the
> feature.
>
> A brief check indicates that all came from a number of mailing lists that
> my users subscribe to.  Examples like Daily Dilbert list, Oracle list,CNet
> news.com list...etc.
>

3.23-1 blocks any HTML message containing the iframe tag. This means that
almost any mailing list message in HTML format containing an ad banner is
blocked.
I'm going to test 3.23-2 in a few minutes to see if this behaviour is still
there, but I think it is, since it is one of the GFI tests recently
introduced.

Maurizio

- --
______
     / Maurizio M. Munafo'                         /   dMMMMMMMMb  dMMMMb
    / Dip. di Elettronica - Politecnico di Torino /   dMP"dMP"dMP    "dMP
   / Corso Duca degli Abruzzi 24                 /   dMP dMP dMP   dMMK"
  / I-10129 Torino (Italia)                     /   dMP dMP dMP     dMF
 / Tel: +39 011 5644128  Fax: +39 011 5644099  /   dMP dMP dMP dMMMMP"
/ E-mail: munafo at polito.it                    /__________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9kV3FtgCCNnfQWWkRArjUAJ94ydmTJRZeqeB1uI0S4rBOsHzEPQCePgr4
fvXYRz2k42vtDJfSwDLoaFc=
=XAKq
-----END PGP SIGNATURE-----