[7472] in bugtraq
Eudora exploit confirmed on 3.05 Pro
daemon@ATHENA.MIT.EDU (j.baggen@STL-GROUP.COM)
Wed Jul 29 20:15:26 1998
Date: Wed, 29 Jul 1998 19:59:31 +0200
Reply-To: j.baggen@STL-GROUP.COM
From: j.baggen@STL-GROUP.COM
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <006101bdbae6$92f1b380$33b773c6@lager.ecosoft.com>
At 07:46 7/29/98 -0400, you wrote:
>At least some versions of Eudora Light prior to 3.0.5 return a Divide by
>Zero error and immediately close when trying to pop a message that has a
>ctime of 0 (Read as Dec 31 1969 19:00 EST (-0500)). This apparently
>corrupts the .mbx file, and both the message on the pop server and the .mbx
>file must be manually removed (or hacked) in order to proceed. I can't
>reproduce this problem with version 3.0.5, and I don't have available an
>older copy to re-try this.
>
>I discovered this anomoly doing ISP tech support for a customer.
>
>Can anyone confirm or deny this?
>
>
Confirmed, I`ve tried with Eudora Pro 3.05. When mailserver is polled
Eudora will close immediatly and inbox is indeed corrupted. Message must
be deleted on the server.
_________________________________________________________
J.J.W.H. Baggen Starline Group Europe www.stl-group.com
SALES DEPARTEMENT: sales@stl-group.com +31(0)455 650 137
