Re: Long attachment filename exploits: a procmail filter

From: John D. Hardin (jhardinat_private)
Date: Wed Jul 29 1998 - 20:42:46 PDT

  • Next message: John D. Hardin: "Re: Long attachment filename exploits: a procmail filter"

    On Wed, 29 Jul 1998, Brett Glass wrote:
    
    > Finally, there are other possible exploits, like a very long content
    > type, that might also lead to buffer oveflows in mail clients. These
    > should be checked too.
    
    Okay, very long Content-Type headers are now sanitized as well.
    
    Grab the latest from http://www.wolfenet.com/~jhardin/html-trap.procmail
    and take a look.
    
    --
     John Hardin KA7OHZ                               jhardinat_private
     pgpk -a finger://gonzo.wolfenet.com/jhardin    PGP key ID: 0x41EA94F5
     PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76
    -----------------------------------------------------------------------
      Your mouse has moved. Windows NT must be restarted for the change
      to take effect. Reboot now?  [ OK ]
    -----------------------------------------------------------------------
       88 days until Daylight Savings Time ends
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:10:46 PDT