Re: [Exim] verify=header_syntax Buffer overflow (CAN-2004-04…

On Thu, May 06, 2004 at 04:09:27PM +0200, Nico Erfurth wrote:
> Andreas Metzler wrote:
> >Hello,
> >Afaict the broken code in src/verify.c is completely useless in exim4.
> >The header name is copied to hname but the error message is generated
> >from h->text and hname is ignored.
> Damn, you've beaten me by 5 secs ;)

By which time the buffer overflow has already happened.

MBM

--
Matthew Byng-Maddick          <mbm@???>           http://colondot.net/
                      (Please use this address to reply)