Don,

Paul Russell gives a very concise description of the exposure in his post
http://peach.ease.lsoft.com/scripts/wa.exe?A2=ind0105&L=lstown-l&F=&S=&P=201
65

Discussions of this topic can be found in the May and June 2001 archives of
http://peach.ease.lsoft.com/archives/lstown-l.html and
http://peach.ease.lsoft.com/archives/lstsrv-l.html under subjects:

  "HTML posts make LISTSERV lists a soft target for hackers" and

  "Change request: Language=NoHTML should cause rejection of single part
HTML
  messages"

Jim

-----Original Message-----
From: LISTSERV list owners' forum
[mailto:[log in to unmask]]On Behalf Of Don Wiss
Sent: Saturday, August 25, 2001 7:40 PM
To: [log in to unmask]
Subject: Re: Change request: Language=NoHTML should cause rejection of
single part HTML messages


Jim Walker wrote:

>There is now a Trojan in the wild that will not be stopped by
>language=NoHTML. This Trojan is not now widespread but it is a serious
>threat.
>
> http://www.zdnet.com/zdnn/stories/news/0%2C4586%2C5096155%2C00.html

Why wouldn't language=NoHTML stop it from going out to list subscribers?