From owner-freebsd-security Wed Apr 4 13:53:32 2001 Delivered-To: freebsd-security@freebsd.org Received: from lariat.org (lariat.org [12.23.109.2]) by hub.freebsd.org (Postfix) with ESMTP id D355437B71F for ; Wed, 4 Apr 2001 13:53:27 -0700 (PDT) (envelope-from brett@lariat.org) Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2]) by lariat.org (8.9.3/8.9.3) with ESMTP id OAA08189; Wed, 4 Apr 2001 14:53:14 -0600 (MDT) Message-Id: <4.3.2.7.2.20010404145126.04484250@localhost> X-Sender: brett@localhost X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 04 Apr 2001 14:53:09 -0600 To: Christoph Kukulies , freebsd-security@FreeBSD.ORG From: Brett Glass Subject: Re: sendmail (possible attack) in logs In-Reply-To: <200104041527.f34FRB571384@gilberto.physik.rwth-aachen.de> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org If you have clients running Microsoft Outhou... er, Outlook, you should be concerned. It's susceptible to exploits delivered via extra-long MIME headers. --Brett At 09:27 AM 4/4/2001, Christoph Kukulies wrote: >I'm seeing this for a couple of days now in my /var/log/messages: > >Apr 3 18:28:12 gil sendmail[63971]: f33GSBt63970: Truncated MIME Content-Type h >eader due to field size (possible attack) > >Do I need to be concerned? > >-- >Chris Christoph P. U. Kukulies kuku@gil.physik.rwth-aachen.de > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message