[10919] in bugtraq
Re: Outlook denial of service
daemon@ATHENA.MIT.EDU (Aleph One)
Wed Jun 30 14:38:55 1999
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-Id: <19990630122749.D24396@underground.org>
Date: Wed, 30 Jun 1999 12:27:49 -0700
Reply-To: Aleph One <aleph1@UNDERGROUND.ORG>
From: Aleph One <aleph1@UNDERGROUND.ORG>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <005e01bec1b0$8bc4fbe0$0400000a@refract.com>; from Nicholas W.
Blasgen on Mon, Jun 28, 1999 at 02:52:34PM -0700
On Mon, Jun 28, 1999 at 02:52:34PM -0700, Nicholas W. Blasgen wrote:
> I tested it with Outlook 2000 with Windows 98 and had no problem.
>
> Nicholas Blasgen
> Refract Media
>
> "The hard part was figuring out how to destroy the
> physical universe. But I think we've solved that."
> - Marcus Larry, 1999
As Neil Christie <neil@fissure.net> pointed out in private email
is this the fault of Outlook and not Qpopper. Here is what he
had to say:
The POP3 RFC suggests that duplicate UIDLs are acceptable for example
in the situation that there are two identical copies of 1 message in
a mailbox.
As such the fault is with Outlook etc in failing to handle this as
opposed to in qpopper for generating / allowing them.
Whether the POP server should accept incoming UIDL headers in the
message or always generate its own is another issue.
From ftp://ftp.isi.edu/in-notes/rfc1939.txt
--
Aleph One / aleph1@underground.org
http://underground.org/
KeyID 1024/948FD6B5
Fingerprint EE C9 E8 AA CB AF 09 61 8C 39 EA 47 A8 6A B8 01
