Nerijus Baliunas wrote:

It's name in email message is:
Content-Type: application/msword;name="vaidoto[1][1].doc.doc"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="vaidoto[1][1].doc.doc"



You're so right Nerijus - I had added an extra check in the last release - and never checked it worked :-(

If you want to fix it, change

if (!$quarantine_event && ($file =~ /(^.*)\.($VALID_WINDOWS_EXTENSIONS)\s*\.($SNEAKY_WINDOWS_EXTENSIONS)$/i) && $file !~ /((\.[a-z0-9]{3})\1|\.pp.\.pp.)$/i) {

to

if (!$quarantine_event && ($file =~ /(^.*)\.($VALID_WINDOWS_EXTENSIONS)\s*\.($SNEAKY_WINDOWS_EXTENSIONS)$/i) && $file !~ /(\.[a-z0-9]{3})\1|\.pp.\.pp.$/i) {

i.e. there's an extra set of brackets in there that aren't actually needed, and had broken a lookup for \1 - it should have been changed to \2. The extra brackets aren't needed, so it's best to remove them instead.

I'll resend this message with a more appropriate Subject line

--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to