Vulnerability Development mailing list archives

Re: Infinite loop in LOTUS NOTE 5.0.3. SMTP SERVER


From: BlueBoar () THIEVCO COM (Blue Boar)
Date: Sat, 20 May 2000 22:33:01 -0700


That's what the hop count is for.  It should eventually figure it out,
and drop it.  Does the Notes MTA not keep track of the hop count?
Even so, since you can start the loop with a smal note, you can get
a nice amplification effect for a limited amount of time.  I've
even seen some MTAs keep attaching the original, with a new
bounce header.. so the messages keep getting bigger.  If you inject
a new loop note every once in a while, you can keep the Notes server
busy forever.  I expect anti-relay settings might have an effect as well.

Artisoft's XTramail server doesn't do anti-relay by default, doesn't
check for loops, and increases the size of the note each time. :)

                                        BB


So Lotus Notes SMTP Server now will loop forever trying to tell to the
sender that the recipient doesn´t exist, as the sender doesn´t exist and
it resides in the same server, the smtp server will loop forever.
As I said b4 maybe this is a configuration error in the Lotus Note
server, though I couldn´t confirm it cause I haven´t got access to the
server...maybe someone here could check it out ?
Keep Smiling.


Current thread: