Secure shell by mail

Article View: comp.security.misc

Article #575

Back to comp.security.misc Previous Next

#575

From: Ayman I. Kayssi
Date: Tue, 13 Oct 1992 17:24

15 lines
1326 bytes

I posted a question on comp.unix.questions about how to get a shell by email,
that is a shell that would execute what's in the body of an email message.
All the details have been worked out except for one thing: security.
Currently, security is obtained using the following:
1- the subject of the message is a certain (fixed) special string
2- a header line is added which contains an encrypted string
You can see that the problem is that the message itself contains the security
keys, and therefore anyone can intercept the email and fake a message...
So, are there any suggestions on how to make this more secure?
Email or post...
Thanks,
--
Ayman I. Kayssi                               |    ayman@eecs.umich.edu
EECS Department                               +------------------------
University of Michigan                        |          (313) 764-8033

Technical Details

Message-ID: <1992Oct13.172459.28720@zip.eecs.umich.edu>

Path:

arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!darwin.sura.net!spool.mu.edu!umn.edu!umeecs!eecs.umich.edu!ayman

Show Full Headers

Complete Article Headers

Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!darwin.sura.net!spool.mu.edu!umn.edu!umeecs!eecs.umich.edu!ayman
From: ayman@eecs.umich.edu (Ayman I. Kayssi)
Subject: Secure shell by mail
Message-ID: <1992Oct13.172459.28720@zip.eecs.umich.edu>
Lines: 15
Sender: news@zip.eecs.umich.edu (Mr. News)
Organization: ACAL, EECS, University of Michigan, Ann Arbor
Distribution: usa
Date: Tue, 13 Oct 1992 17:24:39 GMT