full-disclosure - Virii that can exploit email server?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <6E4A626CCE3C664F81F478A3674A40F8019D2096@epimetheus.adone.com>
From: JThomas at poweronemedia.com (Joshua Thomas)
Subject: Virii that can exploit email server?

Is anyone aware of a virus, transmitted via email, that is able to exploit
the email server it resides on? 

Eg: 

User A is infected by virus
User A sends email to friend
Virus follows email and is stored on Email Server A
Virus exploits Email Server A, infects other emails, causes world
domination, etc.

As far as I know this is not possible because the MTA should treat the virus
as data, not code. Have there been any known cases of the above? I have done
some research on Symantec's virii database, asked around, etc. and haven't
heard of anything.

Thanks,

Joshua Thomas
Network Operations Engineer
PowerOne Media, Inc.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030722/0f0d49e1/attachment.html