It is possible to crash qmail - well almost

Hi Guys,

I have found a situation were a specifically constructed Email
base64 attachment, stored in a users Maildir directory, is able
to stop qmail pop from working.

The problem is reproduceable.

qmail version: 1.03

The "bug" prevents the Email client from retreiving the Email,
causing the client to just sit there without doing anything.

The only way to be able to "pop" your other Email is to manually
log in to the mail server and remove the offending Email from
your Maildir directory.

The string in the base64 which causes it is as follows:

3D 00 30 0A
^^
0A is the last character and is blank when viewed in
an editor, I think it is "new line", have not checked.

This may be an illegal character to have in a base64
but it is there...:-((

That string is at the very end of the base64

The problem is seen with Netscape 6.2 or 7.1 or Outlook.

This is the second time it has happened.

Is it possible to stop pop3d from working when
finding such a string?

Tony

On Tue, 02 Mar 2004 10:39:03 +1100, Tony wrote:

>
> Hi Guys,
>
> I have found a situation were a specifically constructed Email
> base64 attachment, stored in a users Maildir directory, is able
> to stop qmail pop from working.
>
> The problem is reproduceable.
>
> qmail version: 1.03
>
> The "bug" prevents the Email client from retreiving the Email,


No takers on this one?
>
> 3D 00 30 0A

The 00 above, when found in a base64 (At the end) will stop popd
in its tracks...

Tony