14 lines
No EOL
642 B
Text
14 lines
No EOL
642 B
Text
source: http://www.securityfocus.com/bid/4187/info
|
|
|
|
The Bat! is an e-mail client for Microsoft Windows operating systems.
|
|
|
|
A problem occurs with The Bat! when it is configured to save attachments seperately from the body of a message. It is possible to include a MS-DOS device name (such as CON, AUX, PRN, etc.) in the filename of the attachment to cause a denial of service to an e-mail client with this configuration.
|
|
|
|
This appears to be an issue with The Bat! version 1.53d. Earlier versions do not appear to be affected.
|
|
|
|
bash-2.03$ sendmail -U test@test.com
|
|
From: test
|
|
To: test
|
|
Content-Type: apllication/exe; name=lpt1
|
|
|
|
Test |