[TriLUG] OT: winmail.dat

Andrew Perrin clists at perrin.socsci.unc.edu
Thu Jun 26 08:47:07 EDT 2003


Leaving aside the interpersonal politics here, winmail.dat is unwelcome
because it's proprietary junk attached to messages. From memory, it's
generated by one or more of those MS clients I've never used: outlook,
exchange, ???... sorry, not bashing here, I just don't know which is
which.

There's a command-line decoder at http://sourceforge.net/projects/tnef/
that can be used by either an admin or a user to decode the nasty little
buggers.

ap

----------------------------------------------------------------------
Andrew J Perrin - http://www.unc.edu/~aperrin
Assistant Professor of Sociology, U of North Carolina, Chapel Hill
clists at perrin.socsci.unc.edu * andrew_perrin (at) unc.edu


On Thu, 26 Jun 2003, Jim Ray wrote:

> what was the security problem with winmail.dat?  a buddy of mine that
> works for microsoft is interested in correcting the problem.
>
> also, i looked at the trilug.org web site and pulled up one of my posts
> with winmail.dat.  it looked like a bunch of garbage.  any way to get
> the message back, or is it toast?
>
> -----Forwarded Message-----
> > From: Al Mulnick <amulnick at microsoft.com>
> > To: tee-discussion at yahoogroups.com
> > Subject: RE: [tee-discussion] Delegate Control No Longer Working
> > Date: 25 Jun 2003 23:17:11 -0400
> >
> Well, I'm not on corpnet at the moment, but let me have a look
> tomorrow.
>
> FWIW, winmail.dat is the format information. When you see MS-TNEF that
> stands for Microsoft Transport Neutral Encapsulation Method.
>
> I'd love to hear the argument that was used that said that winmail.dat
> is a security threat and I'd love to hear the hack associated.  That
> would be good.  MS-TNEF describes the formatting information for the
> message.  It's nothing more.
>
> Jim, can you post the rest of the headers?
>
> Al
>
> ________________________________________________________________________
> From: Jim Ray
> Sent: Wed 6/25/2003 9:33 PM
> To: tee-discussion at yahoogroups.com
> Subject: RE: [tee-discussion] Delegate Control No Longer Working
>
>
> could be.  prolly some linux client like evolution.  maybe it is time to
> go back to elm or pine :-)
>
> Content-Type: application/ms-tnef;
> name="winmail.dat"
> Content-Transfer-Encoding: base64
>
>         -----Original Message-----
>         From: Robin Krane [mailto:robin at computerconcept.com]
>         Sent: Wednesday, June 25, 2003 9:12 PM
>         To: tee-discussion at yahoogroups.com
>         Subject: RE: [tee-discussion] Delegate Control No Longer Working
>
>
>         could this winmail.dat have anything to do with MAC users.  I
>         have a mac user that I noticed winmail.dat was attached, but not
>         my pc users
>                 -----Original Message-----
>                 From: Jim Ray [mailto:jim at neuse.net]
>                 Sent: Wednesday, June 25, 2003 8:49 PM
>                 To: tee-discussion at yahoogroups.com
>                 Subject: RE: [tee-discussion] Delegate Control No Longer
>                 Working
>
>
>                 there's only one instance of store.exe.  it is version
>                 6.0.6249.4.
>
>                 best my eyes can tell, the only people that have
>                 complained did so when i replied with OWA.  no other
>                 attachments exist.
>
>                 i don't really know what winmail.dat is; however, this
>                 one guy really got his panties in a wad over it and
>                 cited security reasons.
>
>                 meanwhile, the guy that got so upset spews these pgp
>                 signature thingies with his every email that use more
>                 bandwidth than my little ole winmail.dat.
>
>                 so, yeah, if there's a way to get rid of it, i'd
>                 definitely like to know.  thanks, al.
>
>                 btw, if anyone wants one of those 15 CD sets of all the
>                 new microsoft server and office software, we'll have
>                 some at the next tntug.org meeting on hp/compaq servers
>                 and scripted installation.
>                         -----Original Message-----
>                         From: Al Mulnick [mailto:amulnick at microsoft.com]
>                         Sent: Wednesday, June 25, 2003 12:41 PM
>                         To: tee-discussion at yahoogroups.com
>                         Subject: RE: [tee-discussion] Delegate Control
>                         No Longer Working
>
>
>                         Jim, I need more description to narrow this
>                         down.  Is the email generated a reply or a new
>                         message?  What version of store.exe are you
>                         showing on the OWA and Exchange Server system
>                         (are they the same?).
>
>                         Is there an attachment other than winmail.dat
>                         being attached?
>
>                         Al
>
>                         ________________________________________________
>                         From: Jim Ray [mailto:jim at neuse.net]
>                         Sent: Wednesday, June 25, 2003 8:37 AM
>                         To: tee-discussion at yahoogroups.com
>                         Subject: RE: [tee-discussion] Delegate Control
>                         No Longer Working
>
>
>                         basically, technet says sp3 takes care of
>                         winmail.dat on exchange 2000 replies with OWA
>                         given that sp3, indeed, is the latest service
>                         pack.  however, i have had complaints from
>                         recipients that winmail.dat doth spew forth.
>
>                         any help gratefully appreciated.
>
>
>                 To unsubscribe from this group, send an email to:
>                 tee-discussion-unsubscribe at yahoogroups.com
>
>
>
>                 Your use of Yahoo! Groups is subject to the Yahoo! Terms
>                 of Service.
>
>
>         To unsubscribe from this group, send an email to:
>         tee-discussion-unsubscribe at yahoogroups.com
>
>
>
>         Your use of Yahoo! Groups is subject to the Yahoo! Terms of
>         Service.
>
>                          Yahoo! Groups Sponsor
>
>
> To unsubscribe from this group, send an email to:
> tee-discussion-unsubscribe at yahoogroups.com
>
>
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
>
>                          Yahoo! Groups Sponsor
>
>
> To unsubscribe from this group, send an email to:
> tee-discussion-unsubscribe at yahoogroups.com
>
>
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
> --
> Regards,
>
> Jim Ray, Network Engineer
> Neuse River Network, Inc.
> 2610 Vanderbilt Ave
> Raleigh NC 27607-7247
> tel: 919-838-1672 x201
> toll free: 800-617-7652
> http://www.Neuse.Net
>
> _______________________________________________
> TriLUG mailing list
>     http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ:
>     http://www.trilug.org/faq/TriLUG-faq.html
>



More information about the TriLUG mailing list