7 messages in net.sourceforge.lists.courier-maildropRe: [maildropl] Preserve original sen...
FromSent OnAttachments
Ralf HildebrandtFeb 8, 2005 6:15 am 
Ralf HildebrandtFeb 8, 2005 6:20 am 
Sam VarshavchikFeb 8, 2005 4:03 pm 
Ralf HildebrandtFeb 9, 2005 12:13 am 
Milan ObuchFeb 9, 2005 12:28 am 
Sam VarshavchikFeb 9, 2005 4:11 am 
Ralf HildebrandtFeb 9, 2005 4:15 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [maildropl] Preserve original sender wehn using cc !addr@ess ?Actions...
From:Ralf Hildebrandt (Ralf@charite.de)
Date:Feb 9, 2005 12:13:33 am
List:net.sourceforge.lists.courier-maildrop

* Sam Varshavchik <mrs@courier-mta.com>:

Excellent!

Now, by crafting a specially-selected envelope return address, I can easily hack your machine.

MAIL FROM:<`rm -rf /usr/lib/courier`@yahoo.com> RCPT TO:<Ralf@charite.de>

Bonus question: try the above sequence of commands, and see what happens.

Nothing, since the escapes never pass Postfix and /usr/lib/courier is not writable by anyone but root.

-- Ralf Hildebrandt (i.A. des IT-Zentrum) Ralf@charite.de Charite - Universitätsmedizin Berlin Tel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-Berlin Fax. +49 (0)30-450 570-962 IT-Zentrum Standort CBF send no mail to spam@charite.de