[Zope] another worm

J Cameron Cooper jccooper at jcameroncooper.com
Tue Feb 3 20:05:26 EST 2004


Julia Phipps wrote:

> another worm was attached to this email... and if it's my email 
> server, then why do these worms only come attached to emails sent from 
> zope-request at zope.org <mailto:zope-request at zope.org>?
>  
>
>     ----- Original Message -----
>     *From:* zope-request at zope.org <mailto:zope-request at zope.org>
>     *To:* zope at zope.org <mailto:zope at zope.org>
>     *Sent:* Tuesday, February 03, 2004 7:40 AM
>     *Subject:* Zope Digest, Vol 7, Issue 3
>
Possibly it is copying a message on the infected computer and spoofing 
the sender. Or, more likely, some infected computer is replying to 
messages on that machine but spoofing your address and you're getting 
the reply from the zope list manager program. I couldn't nail this down 
for certain without looking at the source of that message and doing some 
experiments with digests and sending mail to that address, but I'll bet 
it's something along those lines. I doubt there's even a person who can 
send messages through zope-request at zope.org and I also doubt that the 
Mailman program is cracked and sending out virus-laden messages.

       --jcc

-- 
"Code generators follow the 80/20 rule. They solve most of the problems, but not all of the problems. There are always features and edge cases that will need hand-coding. Even if code generation could build 100 percent of the application, there will still be an endless supply of boring meetings about feature design."
(http://www.devx.com/java/editorial/15511)




More information about the Zope mailing list