[4065] in WWW Security List Archive
Re: E-mail
daemon@ATHENA.MIT.EDU (Kevin Gannon)
Sat Jan 25 06:51:54 1997
Date: Sat, 25 Jan 1997 10:13:05 +0000 (GMT)
From: Kevin Gannon <kgannon@esiotrot.kst.dit.ie>
To: Evil Pete <shipley@dis.org>
cc: xande <xande@venus.rdc.puc-rio.br>, www-security@ns2.rutgers.edu
In-Reply-To: <199701241933.LAA24512@merde.dis.org>
Errors-To: owner-www-security@ns2.rutgers.edu
On Fri, 24 Jan 1997, Evil Pete wrote:
> >I'd like to know if this program exists...
> >It's a program that u send an e-mail to someone...then.. it bring me back
> >the passwd file... I'd like to know this...
> >By xande
>
> it is bullshit unless the email contain a executable and you are dumb enough
> to run it....
>
It is not bullshit if you are talking about UNIX boxes on older
version of Sendmail it was possible to get the passwd file mailed
out.
Kev.
[----------------------------------------------------------------]
[Kevin Gannon E-Mail KGANNON@dit.ie ]
[ HTTP www.kst.dit.ie/people/kgannon ]
[ Phone 353+1+2895715 ]
[----------------------------------------------------------------]
