Joyce Winslow
jwins@uoregon.edu
A new Microsoft vulnerability that's being exploited by spammers has been causing major email headaches since March.
Holes in Hotmail's WebDAV interface have allowed spammers to script automatic spam runs, contributing to a huge increase in spam--all with forged sender addresses. Microsoft has taken some steps to correct the problem, but Hotmail remains vulnerable as we go to press.
For more details on the Hotmail debacle, see Chip Rosenthal's commentary ("Hotmail Vulnerability Being Exploited by Spammers") at http://www.unicom.com/chrome/a/000262.html
At the University of Oregon, we've taken steps to protect our users from this latest spam blight by blocking some (but not all) email from MSN/Hotmail.*