Vulnerability Development mailing list archives

No body emails and Norton antivirus


From: zerozero () controcultura net
Date: Sun, 26 Sep 2004 00:29:30 +0200

Hello,
  we're getting reports from our customers about 
Outlook + Norton Antivirus crashing on certain messages. 
We tryed to track the problem down, and it seems like that
emails without body and without the \n separating the body
from the headers crashes them. We had not the time to track
the problem down any further, but can anybody confirm this?
Many mail servers accept mails ``without body''.
  We couldn't reproduce it on _all_ platforms, but we
experienced the problem on many installations.

  You can generate a simple test case by sending a 
message to your account using something like:

telnet mail 25
...
rcpt to: ...
data
From: foo () bar org
To: myaccount () test com
Subject: test email
.
quit

  Please make sure the MDA on your server does not
automatically insert a \n after the headers (Subject
should be on the last line -- I think spamassassin, 
procmail and many others do this...).

Thanks for any replay,
Cheers,
zero


Current thread: