Bugtraq mailing list archives
Re: I found this today and iam reporting it to you first!!! (fwd)
From: alan () MANAWATU GEN NZ (Alan Brown)
Date: Wed, 8 Sep 1999 08:07:28 +1200
On Sat, 4 Sep 1999, Wietse Venema wrote:
Whatever reasoning the poster used, it is invalid with any reasonable mail system, because it is the mail system that chooses the bounce message originator address; the bounce message originator address is not under control by the attacker. In other words, the suggested loop does not exist.
I can personally vouch for most cc:mail installations being so braindead that they will bounce indefinitely. One such machine returned 5800 bounce messages from a single complaint sent to bounce messages from a single complaint sent to postmaster@rDNS about relayed spam - with each additional message being 2kb larger than the previous one. Put 2 of those back-to-back and see what happens. AB
Current thread:
- Re: I found this today and iam reporting it to you first!!! (fwd), (continued)
- Re: I found this today and iam reporting it to you first!!! (fwd) blue0ne (Sep 02)
- Re: I found this today and iam reporting it to you first!!! (fwd) Technical Incursion Countermeasures (Sep 02)
- [SECURITY] TenFour TFS SMTP 3.2 Buffer Overflow Christophe Lesur (Sep 02)
- SCO 5.0.5 /bin/doctor local root comprimise Brock Tellier (Sep 03)
- Re: SCO 5.0.5 /bin/doctor local root comprimise Seth R Arnold (Sep 08)
- Re: I found this today and iam reporting it to you first!!! (fwd) Peter van Dijk (Sep 04)
- Re: I found this today and iam reporting it to you first!!! (fwd) Daniel Dulitz (Sep 04)
- Re: I found this today and iam reporting it to you first!!! (fwd) Bret Watson (Sep 07)
- Re: I found this today and iam reporting it to you first!!! (fwd) Daniel W. Dulitz x108 (Sep 06)
- Re: I found this today and iam reporting it to you first!!! (fwd) Wietse Venema (Sep 04)
- Re: I found this today and iam reporting it to you first!!! (fwd) Alan Brown (Sep 07)
- Re: I found this today and iam reporting it to you first!!! (fwd) Jamie A. Lawrence (Sep 04)
- Re: I found this today and iam reporting it to you first!!! (fwd) Bret Watson (Sep 07)
- Re: I found this today and iam reporting it to you first!!! (fwd) Bill Royds (Sep 07)