MailScanner fix for Exchange TNEF vuln?

Cedric Devillers cde at alunys.com
Fri Feb 13 14:50:07 GMT 2009


Well, i can't tell you if it's related to some outlook/exchange version
or config, but here that's easily reproductible here.

Without TNEF (winmail.dat thing), outlook receive meeting requests as
plain mail messages. You don't see the fancy buttons (accept, decline,
etc) and users complain of other missing features (can't remember
exactly which one). With TNEF replacement disabled, everything is
automagically working again.

TNEF is used by outlook for special features, that's why it's also a
dangerous thing.

Jonas Akrouh Larsen wrote:
>> I'm not sure that's entirely acurate.  I have replace TNEF enabled, but
> have received meeting requests from 3rd parties outside our system.  I've
> never had any complaints...
> 
> Same here. We have replaced TNEF for over a year, and have never had issues
> with outlook meeting requests or calendar bookings.
> 
> And all our clients user outlook/exchange.
> 
> 
> 
> Med venlig hilsen / Best regards
>  
> Jonas Akrouh Larsen
>  
> TechBiz ApS
> Laplandsgade 4, 2. sal
> 2300 København S
>  
> Office: 7020 0979
> Direct: 3336 9974
> Mobile: 5120 1096
> Fax:    7020 0978
> Web: www.techbiz.dk
> 
> 
> 
> 


--
Visitez notre nouveau site web: www.amstergroup.com



More information about the MailScanner mailing list