3 messages in net.sourceforge.lists.courier-maildrop[maildropl] escaping/protecting mail ...
FromSent OnAttachments
Turbo FredrikssonJun 28, 2003 2:35 am 
Sam VarshavchikJun 28, 2003 12:45 pm 
Eric SJun 28, 2003 1:23 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[maildropl] escaping/protecting mail address when doing xfilterActions...
From:Turbo Fredriksson (tur@bayour.com)
Date:Jun 28, 2003 2:35:40 am
List:net.sourceforge.lists.courier-maildrop

I've got a couple of mails which have not been checked (and hence not delivered) the last two weeks.

First I just ignored it (it was spam any way). But today it hit me. This might be dangerous!!

----- s n i p ----- <Thomas|tho@domain.tld>: sh: tho@domain.tld: command not found /usr/bin/maildrop: Unable to filter message. I'm not going to try again; this message has been in the queue too long. ----- s n i p -----

It shouldn't be to difficult to figure out a way to use this to do harm to the machine. Well, theoretically anyway. Maildrop is running as a user which have no or very little access to the machine, but still...

-- cryptographic jihad ammonium spy killed SDI Peking colonel kibo supercomputer Cocaine ammunition BATF South Africa Panama [See http://www.aclu.org/echelonwatch/index.html for more about this]