|
|
|
View Notes By
|
|
|
|
Other Documents
|
|
|
|
|
Symantec Information for VU#836088
| Date Notified: | 2002-09-04 |
| Date Updated: | |
| Statement Date: | |
| Status Summary: | Not Vulnerable |
Vendor StatementSymantec has been aware for some time of the potential malicious use of this email feature. As a result, all currently supported Symantec gateway products, by default, block multi-part MIME messages at the gateway. While this is a configurable feature of Symantec gateway products and can be enabled if multi-part email is required, the rejection of segmented messages should be a part of a company's comprehensive security policy to restrict potentially harmful content from the internal network.
Additionally, should known malicious code be delivered to a client computer in this manner, the Symantec and Norton AntiVirus scanning products will detect it when it is reassembled and downloaded to the client computer and/or during attempted execution on the targeted computer. As always, if previously unknown malicious code is being distributed in this manner, Symantec Security Response will react and send updated virus definitions via LiveUpdate to detect the new threat.Vendor InformationThe vendor has not provided us with any further information regarding this vulnerability.
AddendumSymantec has published this advisory.
If you have feedback, comments, or additional information about this vulnerability, please send us
email.
|
 |
