FW: Oh, dear.....
Scott Lanning
slanning at BUPHY.bu.edu
Tue Feb 12 04:51:49 EST 2002
On Mon, 11 Feb 2002 galster at mediaone.net wrote:
>>From Risks-Digest:
^^ SMTP exploit. (sorry :)
>Subject: Yet another Microsoft Outlook exploit
[snip]
>Sadly, it will surprise few people that Microsoft cuts straight to the
>heart of the matter. If your line starts with "begin " (possibly with
>two spaces), Outlook/Outlook Express WILL interpret the rest of the
>message as a UUENCODED attachment. It doesn't need a preceding blank
>line, nor a following octal number. It doesn't need subsequent lines
>that actually look like UUENCODED data.
This has been known for a year or more I think.
I've sometimes used it to annoy people on usenet
because they'll get a blank page. Sort of like an
inverse killfilter on OE users. ;)
More information about the Discuss
mailing list