Full Disclosure mailing list archives

Re: VeriSign's fake SMTP server for SiteFinder

From: Valdis.Kletnieks () vt edu
Date: Mon, 22 Sep 2003 21:41:14 -0400

On Mon, 22 Sep 2003 21:37:33 BST, Dan Rowles said:

But why they wait until the DATA command is a total mystery to me. It
seems much more logical to bounce the message after the RCPT TO:
command.


The cynic in me notes that the RFC2822 From/To/CC can be different from
the RFC2821 MAIL FROM/RCPT TO.

Attachment: _bin
Description:

Current thread:

VeriSign's fake SMTP server for SiteFinder Richard M. Smith (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Pamela Patterson (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Brent J. Nordquist (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Michal Zalewski (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Damian Gerow (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder fulldisclosure (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Dan Rowles (Sep 22)
  - Re: VeriSign's fake SMTP server for SiteFinder Jonathan A. Zdziarski (Sep 22)
    - Re: VeriSign's fake SMTP server for SiteFinder Joshua Levitsky (Sep 22)
  - Re: VeriSign's fake SMTP server for SiteFinder Valdis . Kletnieks (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Nate Hill (Sep 22)
- <Possible follow-ups>
- RE: VeriSign's fake SMTP server for SiteFinder Joshua Thomas (Sep 22)
  - Re: VeriSign's fake SMTP server for SiteFinder Joshua Levitsky (Sep 22)
    - Re: VeriSign's fake SMTP server for SiteFinder Geoincidents (Sep 22)
    - Re: VeriSign's fake SMTP server for SiteFinder Ng Pheng Siong (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Damian Gerow (Sep 22)
- Re: VeriSign's fake SMTP server for SiteFinder Joshua Levitsky (Sep 22)