https://www.logsat.com/spamfilter/forums/ Sun, 10 May 2026 22:09:31 +0000 Tue, 15 Feb 2005 21:45:20 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=5054 https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5054&PID=5204&title=vulnerability-in-microsoft-outlook#5204 Author: LogSat
Subject: 5054
Posted: 15 February 2005 at 9:45pm

This does neither apply nor relate to SpamFilter ISP, I am howeverposting it here on this forum as a first step in making thisvulnerability public after several repeated, failed, attempts to haveMicrosoft acknowledge and fix the flaw.

In simple terms, Microsoft Outlook does not validate correctly thesender in a digitally signed email. This means that anyone can forge adigitally signed email to make it appear as someone else sent it... Itdoes not take a genius to understand how serious this flaw is, knowingthat digitally singned emails are used to legally sign documents andverify/trust senders...

The full story is available http://www.logsat.com/Signatures.
]]> Tue, 15 Feb 2005 21:45:20 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5054&PID=5204&title=vulnerability-in-microsoft-outlook#5204