Trend Micro patches 'p' problem

BOSTON - A recent update to Trend Micro's eManager e-mail security product did more than block spam e-mail -- it took aim at the letter "p," blocking all e-mail messages containing the popular consonant.

Free IT resource TechNet: More ways to know it, share it, and keep it running. Sponsored by Microsoft Free IT resource Attend the SOA Executive Forum: Breaking SOA Bottlenecks SOAExecForum.com/may2007 Sponsored by InfoWorld

The "p" protection was the result of a bug accidentally introduced to eManager in an update to the product's antispam feature. Emanager Rule #915 was released on Tuesday and contained a flawed routine that blocked and quarantined both incoming and outgoing e-mail containing the letter p, according to Mike Sweeny, a spokesman for Trend Micro.

Emanager periodically installs rules to detect new forms of spam, or unsolicited commercial e-mail, he said.

Trend began hearing from customers about the problem shortly after the rule was released and an updated rule, #916, that fixed the p problem was released within 90 minutes, Sweeny said.

The flawed rule does not affect any of Trend Micro's antivirus software and eManager is not related to the company's new Spam Prevention Service, another gateway antispam technology that Trend Micro released in March and that uses heuristic technology, Sweeny said.

Sweeny said that only a small number of Trend Micro customers were affected by the problem, putting the number in the "low double digits."

Because of the severity of the problem, however, Trend notified its eManager customers and resellers of the problem, Sweeny said.

The flawed rule has been removed from the Trend Micro Web site and affected customers were advised to install the updated rule, #916 to resolve the problem and receive the updated antispam definitions, Sweeny said.

Quarantined e-mail messages could be resent to their intended recipients using features built into eManager, though Trend Micro warned in a knowledge base article that in some cases those resent messages will bypass antivirus screening.

In the meantime, Trend Micro is reviewing its procedures for producing and testing rules prior to release and would be tightening those procedures up, according to Sweeny.