Eudora exploit (was Microsoft Security Bulletin (MS98-008))

From: Troy Ablan (chaserat_private)
Date: Wed Jul 29 1998 - 04:46:50 PDT

  • Next message: David Kozinn: "Re: Microsoft Security Bulletin (MS98-008)"

    At least some versions of Eudora Light prior to 3.0.5 return a Divide by
    Zero error and immediately close when trying to pop a message that has a
    ctime of 0 (Read as Dec 31 1969 19:00 EST (-0500)).  This apparently
    corrupts the .mbx file, and both the message on the pop server and the .mbx
    file must be manually removed (or hacked) in order to proceed.  I can't
    reproduce this problem with version 3.0.5, and I don't have available an
    older copy to re-try this.
    
    I discovered this anomoly doing ISP tech support for a customer.
    
    Can anyone confirm or deny this?
    
    
    -----Original Message-----
    From: Brett Glass <brettat_private>
    
    
    >InfoWorld, at
    http://www.infoworld.com/cgi-bin/displayStory.pl?980728.ehbugs.htm,
    >claims that the MIME filename overflow exploit affects Eudora. Is this
    correct?
    >This is the first I've heard of that mailer being vulnerable.
    
    
    -----------------------------------
    Troy Ablan
    shore.net technical support
    (781) 593-3110 x136
    -----------------------------------
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:09:44 PDT