Internet Explorer URL Display problem

Daniel Bird dbird at SGHMS.AC.UK
Wed Dec 10 19:46:29 GMT 2003


Martin Sapsed wrote:

> Hi all,
>
> I've received this via the UK academic network security team.
>
>
>
> Any thoughts anyone?
>
Off the top of my head, could you not do a simple SA rule like so:

describe IE_VULN Body of email contains %01@ in a url
uri IE_VULN / %01@/
score IE_VULN 10.0

Which would look for that pattern in a url.

Of course I could be wrong


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list