FW: Oh, dear.....

[mattg at timesucker.ne.mediaone.net (Matt Galster)]

Do you have a place with good discussion of the situation I can read about it.  I see smoke and hear thunder, but no light has been made to shine on this for me.

Thanks,
MEG

> 
> On Mon, 11 Feb 2002 galster at mediaone.net wrote:
> >>From Risks-Digest:
> 
> ^^ SMTP exploit. (sorry :)
> 
> >Subject: Yet another Microsoft Outlook exploit
> [snip]
> >Sadly, it will surprise few people that Microsoft cuts straight to the
> >heart of the matter.  If your line starts with "begin " (possibly with
> >two spaces), Outlook/Outlook Express WILL interpret the rest of the
> >message as a UUENCODED attachment.  It doesn't need a preceding blank
> >line, nor a following octal number.  It doesn't need subsequent lines
> >that actually look like UUENCODED data.
> 
> This has been known for a year or more I think.
> I've sometimes used it to annoy people on usenet
> because they'll get a blank page. Sort of like an
> inverse killfilter on OE users. ;)
> 
> _______________________________________________
> Discuss mailing list
> Discuss at blu.org
> http://www.blu.org/mailman/listinfo/discuss
>