Vulnerability Development mailing list archives

[Fwd: Netscape mail client error]


From: BlueBoar () THIEVCO COM (Blue Boar)
Date: Fri, 19 Nov 1999 22:15:16 -0800


dolemite () wuli nu wrote:

On Fri, 19 Nov 1999 19:15:40 -0800
 Blue Boar <BlueBoar () THIEVCO COM> wrote:

Email records are often important but I would hope most
self-respecting admins would bother to log such things on
the smtp server rather than just looking at the dates on the
msg. Furthermore I believe there is probably more
information on the header of the email which would probably
show some non quasi-dates.
Using the mail reader that comes with Communicator 4.7

I was noticing that messages place themselves in order of
date in my
inbox.  The date, of course, is dictated by the sender.

After some playing around, I came up with this set of
SMTP commands:

EHLO thievco.com
MAIL FROM:<BlueBoar () thievco com>
RCPT TO:<blueboar () thievco com>
DATA
Date: Fri, 40 Nov
9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
30:70:70 -9900
From: Blue Boar <BlueBoar () thievco com>
To: blueboar () thievco com
Subject: testsub


testbody

.

QUIT

That would cause my mail program trouble.  It reads the
mail, places it as
the oldest e-mail (thinks it's 12/31/69) and then gives a
message:

"Error saving mail"

So far, nothing has crashed, however it refused to delete
them from the POP
server.  I had to manually delete them by telnetting to
port 110 and doing
DELE commands.

Clearly, one can expect problems with e-mail clients and
news readers
trying to interpret intentionally bogus date fields.

I present this to the list to see what other interesting
problems you guys
can discover.

I'm tempted to post one to the list, but I don't think I
could get everyone
(over 3000, now) to consent. :)

                                                      BB

g0ate0ats


Current thread: