full-disclosure - SoBig.F strange problem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <36402DCC1069D411922D00508B5B2CC21E3F2B37@ex-server1.napier.ac.uk>
From: R.Ferris at napier.ac.uk (Ferris, Robin)
Subject: SoBig.F strange problem

Yes, we have seen at lot of them. I think that this is by design as it would
have been, initailly at any rate, a good way of confusing end users.

RF

-----Original Message-----
From: Steve Bremer [mailto:steveb@...coinc.com]
Sent: 20 August 2003 14:10
To: full-disclosure@...ts.netsys.com
Subject: RE: [Full-Disclosure] SoBig.F strange problem

> line). But it seems to be broken in other areas, I think I'm getting

We've noticed a few problems with it as well.  We've received a few e-
mails with one of the typical Sobig subject lines, only no 
attachment.  The attachment headers are in the e-mail, so our MUA 
thinks there is an attachment, but there is just no "body" to the 
attachment.

Either there are a few broken variants out there sending out e-mail 
without the payload, or something in-between us and the sender is 
stripping out the attachment.  It isn't our AV system, since it would 
quarantine the entire message.

Has anyone else experienced this?

Steve Bremer
NEBCO, Inc.
System & Security Administrator

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html