Calendar Server 7 Sends Base64 Encoded Attachment But Content-type Is Text/plain (Doc ID 1480202.1)

Last updated on JULY 05, 2017

Applies to:

Oracle Communications Calendar Server - Version 7.0 (JCS 7) and later
Information in this document applies to any platform.

Symptoms

Observed with Calendar Server 7 with patch 142785-06 on Solaris Sparc platform.

We are using an EICAR test string to simulate a virus (http://en.wikipedia.org/wiki/EICAR_test_file).  For this test, we attach the below .txt file to an event.  What should happen is that the virus scanner should recognize the file as a virus and discard it.  But, instead, it was attached to an event without error.  The string being used is:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR[remove]-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
(minus the "[remove]" bit.)

A test snoop showed that the string is the base64 encoded value, but, the content type is text/plain.  That may be why the virus scanner isn't reacting to it, since it is pretty much text.

Excerpt from snoop:

We have checked the virus scan configuration and do not see anything that would cause this.  It appears that the Calendar Server is sending over something that appears to be base64 encoded, but, the content-type is text/plain, which seems to be causing the virus scanner to not see it.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms