Computer Security
[EN] securityvulns.ru
no-pyccku





Netscape mail client error




Netscape mail client error





=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

   Date: Сб, 20 ноя 1999  06:15:40
  От: Blue Boar <BlueBoar@THIEVCO.COM>
Кому: VULN-DEV@SECURITYFOCUS.COM
Тема: Netscape mail client error
--------------------------------------------------------------------------------


Using the mail reader that comes with Communicator 4.7

I was noticing that messages place themselves in order of date in my
inbox.  The date, of course, is dictated by the sender.

After some playing around, I came up with this set of SMTP commands:

EHLO thievco.com
MAIL FROM:<BlueBoar@thievco.com>
RCPT TO:<blueboar@thievco.com>
DATA
Date: Fri, 40 Nov
999999999999999999999999999999999999999999999999999999999999999999999999999999999
9999999999999999999999999999999999999999999999999999999999999999999999999999
30:70:70 -9900
From: Blue Boar <BlueBoar@thievco.com>
To: blueboar@thievco.com
Subject: testsub


testbody

.

QUIT

That would cause my mail program trouble.  It reads the mail, places it as
the oldest e-mail (thinks it's 12/31/69) and then gives a message:

"Error saving mail"

So far, nothing has crashed, however it refused to delete them from the POP
server.  I had to manually delete them by telnetting to port 110 and doing
DELE commands.

Clearly, one can expect problems with e-mail clients and news readers
trying to interpret intentionally bogus date fields.

I present this to the list to see what other interesting problems you guys
can discover.

I'm tempted to post one to the list, but I don't think I could get everyone
(over 3000, now) to consent. :)

                                                       BB


About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 



Rating@Mail.ru