Announcement

Collapse
No announcement yet.

Blocking TNEF messages in reaction to MS09-003

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Blocking TNEF messages in reaction to MS09-003

    So microsoft released their patches today, and from what I can tell there is a pretty nasty vulnerability in exchange which could be exploited just by receiving the correctly formatted email. This vulenrability lies in the TNEF handling area.

    Since our policy isn't to patch until we've tested, in the mean time we'd like to strip out the TNEF format from incoming emails. Is there a way to do this natively in exchange?

  • #2
    Re: Blocking TNEF messages in reaction to MS09-003

    Natively?
    Not that I am aware of. I would patch sooner rather than later, once a patch is released it is simply a matter of time before an exploit is released.

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment

    Working...
    X