Vulnerability Development mailing list archives

Re: [Fwd: Netscape mail client error]


From: tschroed () ACM ORG (Trevor Schroeder)
Date: Sat, 20 Nov 1999 08:49:58 -0600


On Fri, 19 Nov 1999, Blue Boar wrote:

it hits clients.  All that has to be done is to look for valid date/time
ranges.  It would probably also be smart to check that a piece of e-mail

Not even, all it would have to do is look for a valid date/time, period.

According to RFC 822:

        Section 4.1 says...

                orig-date    = "Date"  ":"  date-time

        Section 5.1 says...

                date-time     = [ day "," ] date time
                ...
                date          = 1*2DIGIT month 2DIGIT ; day month year
                                                      ;  e.g. 20 Jun 82

RFC 1123 changes date to

                date          = 1*2DIGIT month 2*4DIGIT

All valid email must cary a msg with Date fields of the following format:

        D Mon YY
        DD Mon YY
        D Mon YYYY
        DD Mon YYYY

Anything else can be dropped.
..........................................................................
: "I knew it was going to cost me my head and also my swivel chair, but  :
: I thought: What the hell--better men than I have risked their heads    :
: and their swivel chairs for truth and justice." -- James P. Cannon     :
:........... http://www.zweknu.org/ for PGP key and more ................:


Current thread: