Re: letter-bomb with tm!

Article View: comp.soft-sys.andrew

Article #2138

Back to comp.soft-sys.andrew Previous Next

#2138

From: Nathaniel Borenstein
Date: Wed, 28 Feb 1990 16:37

11 lines
1009 bytes

Excerpts from internet.info-andrew: 27-Feb-90 letter-bomb with tm! Bill
Janssen@parc.xerox. (179)

> It is possible to embed a tm object in a message, with an attached
> command.  When the message is read, the command will be executed. 
> Luckily, it often seems to core-dump.

If this is true -- and I'm not sure how to reproduce it -- it is
sufficiently serious that I think it should be patched, even if tm isn't
a supported program.  This is aTrojan horse you could drive a truck
through!  But how can you attach a command to a tm?

Technical Details

Message-ID: <0Zuzsq60M2YtQIaKFV@thumper.bellcore.com>

Path:

arc1-ca.pugleaf.net!utzoo!censor!geac!torsqnt!jarvis.csri.toronto.edu!cs.utexas.edu!wuarchive!decwrl!ucbvax!thumper.bellcore.com!nsb

References: <AZur90sB0KGWM1TLVu@holmes.parc.xerox.com>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!utzoo!censor!geac!torsqnt!jarvis.csri.toronto.edu!cs.utexas.edu!wuarchive!decwrl!ucbvax!thumper.bellcore.com!nsb
From: nsb@thumper.bellcore.com (Nathaniel Borenstein)
Newsgroups: comp.soft-sys.andrew
Subject: Re: letter-bomb with tm!
Message-ID: <0Zuzsq60M2YtQIaKFV@thumper.bellcore.com>
Date: 28 Feb 90 16:37:10 GMT
References: <AZur90sB0KGWM1TLVu@holmes.parc.xerox.com>
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The Internet
Lines: 11

Reply to Parent Message