[Mimedefang] Unintended consequences
    Philip Prindeville 
    philipp_subx at redfish-solutions.com
       
    Thu Dec 28 13:45:59 EST 2006
    
    
  
David F. Skoll wrote:
>John Rudd wrote:
>
>  
>
>>Frankly, making the message subject be the "file name" is itself "total
>>braindeath".
>>    
>>
>
>Indeed... I go crazy when software does that.  If you know you will be
>running on totally broken platforms that encode metadata into the file name,
>it's highly irresponsible to let an attacker choose the file name.
>
>Regards,
>
>David.
>  
>
Ok, ok...  I will open a bug when I have time...
-Philip
    
    
More information about the MIMEDefang
mailing list