[TriLUG] OT: winmail.dat

Thu Jun 26 07:11:41 EDT 2003

what was the security problem with winmail.dat?  a buddy of mine that
works for microsoft is interested in correcting the problem.

also, i looked at the trilug.org web site and pulled up one of my posts
with winmail.dat.  it looked like a bunch of garbage.  any way to get
the message back, or is it toast?

-----Forwarded Message-----
> From: Al Mulnick <amulnick at microsoft.com>
> To: tee-discussion at yahoogroups.com
> Subject: RE: [tee-discussion] Delegate Control No Longer Working
> Date: 25 Jun 2003 23:17:11 -0400
> 
Well, I'm not on corpnet at the moment, but let me have a look
tomorrow.  

FWIW, winmail.dat is the format information. When you see MS-TNEF that
stands for Microsoft Transport Neutral Encapsulation Method.  

I'd love to hear the argument that was used that said that winmail.dat
is a security threat and I'd love to hear the hack associated.  That
would be good.  MS-TNEF describes the formatting information for the
message.  It's nothing more.  

Jim, can you post the rest of the headers?

Al

________________________________________________________________________
From: Jim Ray
Sent: Wed 6/25/2003 9:33 PM
To: tee-discussion at yahoogroups.com
Subject: RE: [tee-discussion] Delegate Control No Longer Working

could be.  prolly some linux client like evolution.  maybe it is time to
go back to elm or pine :-)

Content-Type: application/ms-tnef;
name="winmail.dat"
Content-Transfer-Encoding: base64

        -----Original Message-----
        From: Robin Krane [mailto:robin at computerconcept.com]
        Sent: Wednesday, June 25, 2003 9:12 PM
        To: tee-discussion at yahoogroups.com
        Subject: RE: [tee-discussion] Delegate Control No Longer Working

        could this winmail.dat have anything to do with MAC users.  I
        have a mac user that I noticed winmail.dat was attached, but not
        my pc users
                -----Original Message-----
                From: Jim Ray [mailto:jim at neuse.net]
                Sent: Wednesday, June 25, 2003 8:49 PM
                To: tee-discussion at yahoogroups.com
                Subject: RE: [tee-discussion] Delegate Control No Longer
                Working

                there's only one instance of store.exe.  it is version
                6.0.6249.4.

                best my eyes can tell, the only people that have
                complained did so when i replied with OWA.  no other
                attachments exist.

                i don't really know what winmail.dat is; however, this
                one guy really got his panties in a wad over it and
                cited security reasons.

                meanwhile, the guy that got so upset spews these pgp
                signature thingies with his every email that use more
                bandwidth than my little ole winmail.dat.

                so, yeah, if there's a way to get rid of it, i'd
                definitely like to know.  thanks, al.

                btw, if anyone wants one of those 15 CD sets of all the
                new microsoft server and office software, we'll have
                some at the next tntug.org meeting on hp/compaq servers
                and scripted installation.
                        -----Original Message-----
                        From: Al Mulnick [mailto:amulnick at microsoft.com]
                        Sent: Wednesday, June 25, 2003 12:41 PM
                        To: tee-discussion at yahoogroups.com
                        Subject: RE: [tee-discussion] Delegate Control
                        No Longer Working

                        Jim, I need more description to narrow this
                        down.  Is the email generated a reply or a new
                        message?  What version of store.exe are you
                        showing on the OWA and Exchange Server system
                        (are they the same?). 

                        Is there an attachment other than winmail.dat
                        being attached?

                        Al

                        ________________________________________________
                        From: Jim Ray [mailto:jim at neuse.net] 
                        Sent: Wednesday, June 25, 2003 8:37 AM
                        To: tee-discussion at yahoogroups.com
                        Subject: RE: [tee-discussion] Delegate Control
                        No Longer Working

                        basically, technet says sp3 takes care of
                        winmail.dat on exchange 2000 replies with OWA
                        given that sp3, indeed, is the latest service
                        pack.  however, i have had complaints from
                        recipients that winmail.dat doth spew forth.

                        any help gratefully appreciated.

                To unsubscribe from this group, send an email to:
                tee-discussion-unsubscribe at yahoogroups.com

                Your use of Yahoo! Groups is subject to the Yahoo! Terms
                of Service.

        To unsubscribe from this group, send an email to:
        tee-discussion-unsubscribe at yahoogroups.com

        Your use of Yahoo! Groups is subject to the Yahoo! Terms of
        Service.

                         Yahoo! Groups Sponsor

To unsubscribe from this group, send an email to:
tee-discussion-unsubscribe at yahoogroups.com

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.

                         Yahoo! Groups Sponsor

To unsubscribe from this group, send an email to:
tee-discussion-unsubscribe at yahoogroups.com

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
-- 
Regards,

Jim Ray, Network Engineer
Neuse River Network, Inc.
2610 Vanderbilt Ave
Raleigh NC 27607-7247
tel: 919-838-1672 x201
toll free: 800-617-7652
http://www.Neuse.Net