Internet Explorer URL Display problem

Daniel Bird dbird at SGHMS.AC.UK
Wed Dec 10 19:46:29 GMT 2003

Martin Sapsed wrote:

> Hi all,
> I've received this via the UK academic network security team.
> Any thoughts anyone?
Off the top of my head, could you not do a simple SA rule like so:

describe IE_VULN Body of email contains %01@ in a url
uri IE_VULN / %01@/
score IE_VULN 10.0

Which would look for that pattern in a url.

Of course I could be wrong

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

More information about the MailScanner mailing list