All:
A while back I seem to remember there was some brief discussion of a
worm that was generating malformed RFC822 headers, specifically having
continued header lines that were NOT indented properly (I assume in an
attempt to bypass strict security systems to attack forgiving mailers,
though stupidity may also be the cause).
For example:
Properheader: blahblahblah
continuation line properly indented
Malformedheader: blahblahblah
continued header not indented
another unindented header continuation line
I've been poking around but I can't find this in my archive of
interesting list postings that I've kept.
Does anybody else remember this?
Question: does procmail deal gracefully with RFC822 headers malformed
in this manner?
Request: does anybody have a real-life sample of one of these that
could be gzipped and sent to me?
Thanks!
--
John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/
jhardin(_at_)impsec(_dot_)org pgpk -a
jhardin(_at_)wolfenet(_dot_)com
768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
In 1998 more than three times as many people in the US were killed
by incompetent physicians than were killed by handguns, yet the
President of the A.M.A. is adopting "gun safety" as his platform.
-----------------------------------------------------------------------
1011 days until the Presidential Election
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail