From: Paul Jakma (paulj at domain itg.ie)
Date: Tue 09 May 2000 - 13:31:45 IST
On Tue, 9 May 2000, Justin Mason wrote:
> BTW Paul are you serious about older versions of pine running attached
> shell scripts?? That's *so* broken.
>
not quite as bad as that. :)
but older versions of pine had a mime-parsing bug, which meant it was
possible to get pine to run arbitrary shell commands by sending it the
right mime-headers. :(
search bugtraq for "pine mime"
(wouldn't be surprised if similar bugs existed in other unix mail handlers
that parsed mime).
> --j.
>
>
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:06:04 GMT