This is a full disclosure of a RFC 2821 vulnerability with THIS list.
--
I hate duplicates. Just reply to the relevant mailinglist.
[EMAIL PROTECTED] http://hvdkooij.xs4all.nl/
Don't meddle in the affairs of magicians,
for they are subtle and quick to anger.
---------- Forwarded message ----------
Return-Path: <MAILER-DAEMON>
Received: from smtp-vbr10.xs4all.nl (smtp-vbr10.xs4all.nl [194.109.24.30])
by gandalf.hugo.vanderkooij.org (8.12.10/8.12.10) with ESMTP id
i976Wp6H021044
for <[EMAIL PROTECTED]>; Thu, 7 Oct 2004 08:32:52 +0200
Received: from localhost (localhost)
by smtp-vbr10.xs4all.nl (8.12.11/8.12.11) id i976Wqtt062769;
Thu, 7 Oct 2004 08:32:52 +0200 (CEST)
(envelope-from MAILER-DAEMON)
Date: Thu, 7 Oct 2004 08:32:52 +0200 (CEST)
From: Mail Delivery Subsystem <[EMAIL PROTECTED]>
Message-Id: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="i976Wqtt062769.1097130772/smtp-vbr10.xs4all.nl"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
X-Scanned-By: milter-sender/0.55.730 (gandalf.hugo.vanderkooij.org []); Thu,
07 Oct 2004 08:32:52 +0200
X-vanderkooij.org-MailScanner: Found to be clean
X-vanderkooij.org-MailScanner-SpamCheck: not spam, SpamAssassin (score=-4,
required 5, autolearn=not spam, BAYES_00 -4.00)
This is a MIME-encapsulated message
--i976Wqtt062769.1097130772/smtp-vbr10.xs4all.nl
The original message was received at Thu, 7 Oct 2004 08:32:51 +0200 (CEST)
from hvdkooij.xs4all.nl [213.84.18.35]
----- The following addresses had permanent fatal errors -----
<[EMAIL PROTECTED]>
(reason: 553 5.3.0 <[EMAIL PROTECTED]>... No such user at LISTS.NETSYS.COM)
----- Transcript of session follows -----
... while talking to netsys.com.:
>>> RCPT To:<[EMAIL PROTECTED]>
<<< 553 5.3.0 <[EMAIL PROTECTED]>... No such user at LISTS.NETSYS.COM
550 5.1.1 <[EMAIL PROTECTED]>... User unknown
--i976Wqtt062769.1097130772/smtp-vbr10.xs4all.nl
Content-Type: message/delivery-status
Reporting-MTA: dns; smtp-vbr10.xs4all.nl
Received-From-MTA: DNS; hvdkooij.xs4all.nl
Arrival-Date: Thu, 7 Oct 2004 08:32:51 +0200 (CEST)
Final-Recipient: RFC822; [EMAIL PROTECTED]
Action: failed
Status: 5.3.0
Remote-MTA: DNS; netsys.com
Diagnostic-Code: SMTP; 553 5.3.0 <[EMAIL PROTECTED]>... No such user at
LISTS.NETSYS.COM
Last-Attempt-Date: Thu, 7 Oct 2004 08:32:51 +0200 (CEST)
--i976Wqtt062769.1097130772/smtp-vbr10.xs4all.nl
Content-Type: message/rfc822
Return-Path: <[EMAIL PROTECTED]>
Received: from gandalf.hugo.vanderkooij.org (hvdkooij.xs4all.nl [213.84.18.35])
by smtp-vbr10.xs4all.nl (8.12.11/8.12.11) with ESMTP id i976Wptt062765
for <[EMAIL PROTECTED]>; Thu, 7 Oct 2004 08:32:51 +0200 (CEST)
(envelope-from [EMAIL PROTECTED])
Received: from gandalf (gandalf [192.168.1.2])
by gandalf.hugo.vanderkooij.org (8.12.10/8.12.10) with ESMTP id i976We6I021029
for <[EMAIL PROTECTED]>; Thu, 7 Oct 2004 08:32:41 +0200
Date: Thu, 7 Oct 2004 08:32:40 +0200 (CEST)
From: Hugo van der Kooij <[EMAIL PROTECTED]>
Sender: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Mailman results for Full-Disclosure (fwd)
Message-ID: <[EMAIL PROTECTED]>
X-Warning: This message should not be read while consuming liquids.
X-message: All email to me is bound to the rules detailed on
http://hvdkooij.xs4all.nl/email.cms
X-WebTV-Stationery: Standard; BGColor=black; TextColor=black
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Scanned-By: milter-sender/0.55.730 (gandalf.hugo.vanderkooij.org []); Thu, 07 Oct
2004 08:32:41 +0200
X-vanderkooij.org-MailScanner: Found to be clean
X-vanderkooij.org-MailScanner-SpamCheck: not spam (whitelisted),
SpamAssassin (score=-4, required 5, autolearn=not spam,
BAYES_00 -4.00)
X-Virus-Scanned: by XS4ALL Virus Scanner
I did not get a acknowledgement and did a resend of my acknowledgment.
I still dot not confirmation but as I could request a password from the
system I must assume the subscribtion was ok.
Can you send out a welcome package so anyone knows they send a in a proper
verification message?
Hugo.
--
I hate duplicates. Just reply to the relevant mailinglist.
[EMAIL PROTECTED] http://hvdkooij.xs4all.nl/
Don't meddle in the affairs of magicians,
for they are subtle and quick to anger.
---------- Forwarded message ----------
Date: Thu, 07 Oct 2004 02:09:04 -0400
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Mailman results for Full-Disclosure
This is an automated response.
There were problems with the email commands you sent to Mailman via
the administrative address <[EMAIL PROTECTED]>.
To obtain instructions on valid Mailman email commands, send email to
<[EMAIL PROTECTED]> with the word "help" in the
subject line or in the body of the message.
If you want to reach the human being that manages this mailing list,
please send your message to <[EMAIL PROTECTED]>.
The following is a detailed description of the problems.
***** confirm 718300
>>>>> Invalid confirmation number!
>>>>> Note that confirmation numbers expire 3 days after initial request.
>>>>> Please check date and number and try again, from the start if necessary.
--i976Wqtt062769.1097130772/smtp-vbr10.xs4all.nl--
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
