FW: Oh, dear.....

Scott Lanning slanning at BUPHY.bu.edu
Tue Feb 12 04:51:49 EST 2002


On Mon, 11 Feb 2002 galster at mediaone.net wrote:
>>From Risks-Digest:

^^ SMTP exploit. (sorry :)

>Subject: Yet another Microsoft Outlook exploit
[snip]
>Sadly, it will surprise few people that Microsoft cuts straight to the
>heart of the matter.  If your line starts with "begin " (possibly with
>two spaces), Outlook/Outlook Express WILL interpret the rest of the
>message as a UUENCODED attachment.  It doesn't need a preceding blank
>line, nor a following octal number.  It doesn't need subsequent lines
>that actually look like UUENCODED data.

This has been known for a year or more I think.
I've sometimes used it to annoy people on usenet
because they'll get a blank page. Sort of like an
inverse killfilter on OE users. ;)




More information about the Discuss mailing list