Bugtraq mailing list archives
Apologies for wierd email
From: btellier () USA NET (Brock Tellier)
Date: Sun, 5 Dec 1999 11:06:36 MST
Greetings, I wish to clear up a bit of a misunderstanding regarding a wierd email that some of you recieved. If you were affected, you recieved an email with no subject containing text along the lines of: --- Your ueber-secret password on 0wned.com is fD83#2a Brock Tellier Unix Systems Administrator Chicago, IL, usa btellier () usa net --- I'll admit, it's an odd thing to recieve, but let me explain. Those of you who got the correct bugtraq post from me recieved "UnixWare read/modify users' mail", a post which detailed how any user could read other people's mail under UW7.1. In it, I set up a typical scenario where this would happen, including copy/pasteing an example email that might have been intercepted. I pasted this message, along with all the mail headers, into my advisory. The result of this is that some of your broken email programs interpereted this as TWO SEPERATE MESSAGES. It was actually only ONE message which contained the message headers in the body of the message. As Aleph One explained it to me: It did not get screwed. It seems to be the result of broken MUA's that can't even properly read a mbox formated file correctly. They seem to be confused by the message. Using any decent MUA the message is displayed just fine. All this being said, please understand that I didn't send out a real password to 0wned.com (I wonder how many ssh connections that server got using root:fd*3la@A as their login/pass) and I do not have any affiliation with this server. Brock Tellier UNIX Systems Administrator Chicago, IL, USA btellier () usa net ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1
Current thread:
- HP Secure Web Console Jon Mitchell (Dec 01)
- Re: HP Secure Web Console Alec Kosky (Dec 01)
- Re: HP Secure Web Console Keith Rice (Dec 02)
- Re: HP Secure Web Console GNSS Research Division (Dec 03)
- Re: HP Secure Web Console GNSS Research Division (Dec 03)
- UnixWare gain root with non-su/gid binaries Brock Tellier (Dec 03)
- UnixWare read/modify users' mail Brock Tellier (Dec 03)
- UnixWare and the dacread permission Brock Tellier (Dec 03)
- Apologies for wierd email Brock Tellier (Dec 05)
- Re: HP Secure Web Console Keith Rice (Dec 02)
- Re: HP Secure Web Console David Zverina (Dec 02)
- Re: HP Secure Web Console Alec Kosky (Dec 01)
- <Possible follow-ups>
- Re: HP Secure Web Console Mark Gross DSO (Dec 01)
- Re: HP Secure Web Console Randal L. Schwartz (Dec 06)
- Re: HP Secure Web Console Thillmann, Rolf (Dec 28)