Re: [Exim] verify=header_syntax Buffer overflow (CAN-2004-04…

Pàgina inicial
Delete this message
Reply to this message
Autor: Andreas Metzler
Data:  
A: Exim-Users (E-mail)
Assumpte: Re: [Exim] verify=header_syntax Buffer overflow (CAN-2004-0400)
On 2004-05-06 Tony Finch <dot@???> wrote:
> On Thu, 6 May 2004, Philip Hazel wrote:
> >
> > My suspicion is that Some Other MTA (tm) allows it, just like it allows
> > spaces between the name and the colon in alias files.


> It's a consequence of the 822 syntax.


> optional-field  =       field-name ":" unstructured CRLF


> field-name      =       1*ftext


> ftext           =       %d33-57 /               ; Any character except
>                         %d59-126                ;  controls, SP, and
>                                                 ;  ":".
> obs-optional    =       field-name *WSP ":" unstructured CRLF


"except SP". space is ASCII 32 and not included in  "%d33-57", isn't
it?
             cu andreas
--
"See, I told you they'd listen to Reason," [SPOILER] Svfurlr fnlf,
fuhggvat qbja gur juveyvat tha.
Neal Stephenson in "Snow Crash"